DisclosureLens
MalwareHealthcareHealthcareRansomwareData EncryptedSupply Chain (3P Vendor)Customer Data InvolvedPHIHealth (basic)Government IDIdentity (basic)MediumContained

Curtis F. Robinson M.D. Inc.

bd_b91e1f8c7919dfc3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 27, 2016

Filed

Oct 14, 2016

To disclose

11 weeks

Affected

Not disclosed

Confidence

64%
Full breach record for Curtis F. Robinson M.D. Inc. →2 incidents on file

Marin Medical Practice Concepts, Inc. (MMPC), an electronic medical record provider for Curtis F. Robinson, M.D. Inc., experienced a ransomware attack on July 26, 2016. MMPC became aware of the incident on July 27, 2016. The attack resulted in the encryption of systems and the loss of consultation notes for visits between July 11 and July 26, 2016, due to a backup failure during restoration. No evidence suggests patient data was viewed or exfiltrated. Affected data includes PHI, SSNs, and medical history. MMPC notified law enforcement and secured its network.

Incident timeline

undetected · 1 days
discovery → filing · 11 weeks / 79 days

Jul 26, 2016

Begins

Jul 27, 2016

Discovered

Oct 14, 2016

Filed

vs. sector median

1 wks faster

Part of Marin Medical Practice Concepts, Inc. supply-chain incident (2016) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.