HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryPIILowResolved
South Texas Oncology and Hematology, PLLC
bd_bdbf2714544b6771 · schema v1 · pii pii-v1
Full breach record for South Texas Oncology and Hematology, PLLC →South Texas Oncology and Hematology, PLLC (STOH) detected unusual network activity on February 15, 2024, leading to discovery of an external cybersecurity incident that began on or around October 20, 2023. The breach involved unauthorized access to its network. STOH engaged a third-party forensic firm, notified the FBI and regulators, and offered 12-month credit monitoring via CyberScout. 20 Maine residents were among 176,303 individuals affected. Notifications were sent June 13, 2024.
Maine clockDiscovered Feb 15, 2024 → Filed with AG Jun 13, 2024119d ✗ ME AG >90d17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_cbd48682a3249f6cMontana State AGfiled 2024-06-13Verified
- bd_d58cb98b736f7117Indiana State AGfiled 2024-06-13Verified
- bd_ddfc9fab5fbd81f6HHS OCRfiled 2024-04-19(55d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ebb2d9ab-2c2a-4ec5-b643-e916ea0eeb4c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 13, 2024
- Raw hash
- 28c211027cc5910637eb10ffd42d0bf8356c73d14fda5d7aec9da01d7247b886
Reporting entity
- Name
- South Texas Oncology and Hematology, PLLCnorm: south texas oncology and hematology
- Industry
- Healthcare
Victim entity
- Name
- South Texas Oncology and Hematology, PLLCnorm: south texas oncology and hematology
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Feb 15, 2024
- Materiality determined
- —
- Notification sent
- Jun 13, 2024
- Affected individuals
- 20
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement and various regulators in March and April 2024Reported incident to the FBI
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- ME AG >90d · 119dME resident >60d · 119d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 15, 2024→ Filed with AG: Jun 13, 2024119d 90 days ME AG >90d Maine Discovered: Feb 15, 2024→ Notified: Jun 13, 2024119d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.