MalwareRansomwareData EncryptedRansom DemandedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Sandhills Medical Foundation
bd_b9653a4a741ed836 · schema v1 · pii pii-v1
Full breach record for Sandhills Medical Foundation →Sandhills Medical Foundation, Inc. notified South Carolina residents of a data breach involving a third-party data storage vendor. Hackers accessed the vendor's system between September 23, 2020, and December 3, 2020, encrypting data and demanding a ransom. The vendor paid the ransom and recovered the data. Affected information included names, dates of birth, addresses, driver's licenses, Social Security numbers, and claims information. Sandhills offered 90 days of identity theft protection via CyberScout.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_b0a2d000ebf18e01Maine State AGfiled 2021-03-05Candidate
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/SandhillsMedicalFound.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 5, 2021
- Raw hash
- 90735ce0e0037d1e77947b1b7bf8e0e029b6ca6cc313534af6ac0900f6d2d9cb
Reporting entity
- Name
- Sandhills Medical Foundationnorm: sandhills medical
- Domain
- sandhillsmedical.org
Victim entity
- Name
- Sandhills Medical Foundationnorm: sandhills medical
- Domain
- sandhillsmedical.org
Incident
- Discovered
- Jan 8, 2021
- Materiality determined
- —
- Notification sent
- Mar 5, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- The vendor reported this incident to law enforcement
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.