DisclosureLens
MalwareHealthcareFinancial ServicesHealthcareRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedHealth (basic)Identity (basic)PHIMediumResolved

Coordinated Care of Washington, Inc. & Coordinated Care Corp

bd_b8ae2ac5107cb25a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 16, 2022

Filed

Jul 14, 2022

To disclose

28 days

Affected

1,021state residents only

Confidence

70%
Full breach record for Coordinated Care of Washington, Inc. & Coordinated Care Corp →

Coordinated Care of Washington and Coordinated Care Corp reported a ransomware incident involving third-party vendor One Touch Point, Inc. (OTP). Unauthorized access occurred between April 27 and June 3, 2022. OTP notified Coordinated Care on June 16, 2022. The breach affected 1,021 Washington residents, exposing names, healthcare IDs, and clinical information. No SSNs were accessed. OTP engaged law enforcement (FBI) and forensic investigators.

Washington clock✓ WA AG ≤30d28 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 50 days
discovery → filing · 28 days

Apr 27, 2022

Begins

Jun 16, 2022

Discovered

Jul 14, 2022

Filed

vs. sector median

9 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,021 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.