MalwareHealthcareHealthcareRansomwareData EncryptedData DestroyedIdentity (basic)Health (basic)PHILowContained

Children's Choice Pediatrics

bd_bd2b74f5bb06f98c · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 27, 2019

Filed

Dec 16, 2019

To disclose

7 weeks

Affected

2state residents only

Confidence

66%

Full breach record for Children's Choice Pediatrics →

PediHealth, PLLC dba Children's Choice Pediatrics notified Montana patients of a ransomware attack discovered on Oct 27, 2019. Patient names, addresses, DOBs, and health info (including immunizations) were compromised. Some records were deleted. No SSNs were stored. Notification sent Dec 16, 2019.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 50 days

Oct 27, 2019

Discovered

Dec 16, 2019

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: PediHealth, PLLC
norm: pedihealth

Name: Children's Choice Pediatrics
norm: children s choice pediatrics
Also named: PediHealth, PLLCdba oflegal entity
Children’s Choice Pediatricsdba oftrade name
Industry: Healthcarellm

Discovered: Oct 27, 2019
Materiality determined: —
Notification sent: Dec 16, 2019
Affected individuals: 2state-resident count only
Data types: Identity (basic)Health (basic)PHI
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1490 Data Destroyed
Threat actor: ExternalFinancial

During the incident: Immediately took steps to secure our computer system
Began an investigation to identify the affected individuals and the nature of affected information
Consulted information technology personnel and cybersecurity experts to assist in our investigation
Attempted to restore the impacted records
Changes made: Taken steps to strengthen the security of personal information in its possession
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notice-72.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 16, 2019
Raw hash: 5da00b3083d1e5d9ca30626eaf1f9ebc7bd6a53d4c39e20d2580e19186d7588a

Reporting entityPediHealth, PLLC

Victim entityChildren's Choice Pediatrics

Incidentdiscovered Oct 27, 2019

Stated responseImmediately took steps to secure our computer system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov