HackingHealthcareHealthcareStolen CredentialsData ExfiltratedTargetedPIIIdentity (basic)MediumContained

SOUTHCOAST MEDICAL GROUP, LLC

bd_bd4df9cad0c098a6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 18, 2023

Filed

Jul 5, 2024

To disclose

13 months

Affected

32,835state residents only

Linked

3 filings

Confidence

64%

Full breach record for SOUTHCOAST MEDICAL GROUP, LLC →2 incidents on file

SouthCoast Medical Group, LLC notified South Carolina regulators of a breach where an unauthorized actor accessed the network between June 15-18, 2023. The incident involved viewing or copying files containing names and other PII. The company engaged forensic specialists, notified law enforcement and HHS, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due13 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 3 days

discovery → filing · 13 months / 383 days

Jun 15, 2023

Begins

Jun 18, 2023

Discovered

Jul 5, 2024

Filed

vs. sector median

+46 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Vermont State AGbd_766b9c3cb9414a6d2024-07-03 · +2dCandidate
Massachusetts State AGbd_f1041c88b7347df32024-07-03 · +2dVerified

Name: SOUTHCOAST MEDICAL GROUP, LLC
norm: southcoast medical

Name: SOUTHCOAST MEDICAL GROUP, LLC
norm: southcoast medical
Industry: Healthcarellm

Discovered: Jun 18, 2023
Breach occurred: Jun 15, 2023 – Jun 18, 2023
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 5, 2024
Affected individuals: 32,835state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: notifying applicable regulators, including the U.S. Department of Health and Human Services
Initial access: valid_credentials

During the incident: Promptly took steps to secure our systems and investigate the nature and scope of the event with assistance from third-party forensic specialists
Notified federal law enforcement of this incident and are cooperating with their investigation
Notifying applicable regulators, including the U.S. Department of Health and Human Services
Offering credit monitoring and identity theft protection services for <<CM Duration>> months through CyEx, at no cost to you
Changes made: Implemented additional security measures to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(383 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Vermont State AGJul 3 · first

Massachusetts State AGJul 3 · first

South Carolina State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2024/SouthCoastHealth.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 5, 2024
Raw hash: fd950fea6c308d2eec5588501095aee2dcf45f4aec570261df77d367bf9e8e0a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySOUTHCOAST MEDICAL GROUP, LLC

Victim entitySOUTHCOAST MEDICAL GROUP, LLC

Incidentdiscovered Jun 18, 2023

Stated responsePromptly took steps to secure our systems and investigate the nature and scope of the event with assistance from third-party forensic specialists

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov