AccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedDelayed DiscoveryFinancial accountIdentity (basic)Government IDPHIHealth (basic)HighContained

Highline Medical Center

bd_b707869c9dd462f9 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 22, 2016

Filed

Aug 31, 2016

To disclose

6 weeks

Affected

12,724state residents only

Linked

4 filings

Confidence

71%

Full breach record for Highline Medical Center →

Highline Medical Center notified Washington AG that vendor R-C Healthcare Management inadvertently left patient files accessible online from April 21 to June 13, 2016. Highline discovered the breach on July 22, 2016. Data included names, SSNs, and insurance info for 12,724 Washington residents. Highline offered credit monitoring and established a call center.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 92 days

discovery → filing · 6 weeks / 40 days

Apr 21, 2016

Begins

Jul 22, 2016

Discovered

Aug 31, 2016

Filed

vs. sector median

7 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_efb4bbdc33642a3e2016-08-31Verified
Massachusetts State AGbd_b04c465b20c2ffc92016-09-01 · +1dVerified
HHS OCRbd_ed57466eafcc0aa42016-09-01 · +1dVerified

Name: Highline Medical Center
norm: highline medical center

Name: Highline Medical Center
norm: highline medical center
Industry: Healthcarellm

Discovered: Jul 22, 2016
Breach occurred: Apr 21, 2016 – Jun 13, 2016
Undetected for: 92 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 31, 2016
Affected individuals: 12,724state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Health insurance IDSocial Security numberName
WA-stated cause: Theft or Mistake
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: Partner
Regulator citations: Notified Attorney General Bob Ferguson
Initial access: trusted_relationship

During the incident: Began an investigation
Offering affected patients a free one-year membership in credit monitoring and identity theft protection services through Experian
Established a dedicated call center for patients to contact with questions
Requested RCHM to destroy the files
Changes made: Offering free one-year credit monitoring and identity theft protection services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Montana State AGAug 31 · first

Washington State AGAug 31 · first · this page

Massachusetts State AG+1d

HHS OCR+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9642.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 31, 2016
Raw hash: 1a6354af24570bd9f79e96ee64cdf0e7a5b1a012cc5c4679481c964a3cf200b4

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHighline Medical Center

Victim entityHighline Medical Center

Incidentdiscovered Jul 22, 2016

Stated responseBegan an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com