Social EngineeringHealthcareHealthcarePhishingStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)CredentialsLowContained

Columbia River Mental Health Services

bd_be52ff5974c0c5c0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 26, 2022

Filed

Oct 4, 2022

To disclose

6 weeks

Affected

13state residents only

Linked

5 filings

Confidence

66%

Full breach record for Columbia River Mental Health Services →2 incidents on file

Columbia River Mental Health Services notified individuals of unauthorized access to email accounts between May 14, 2021, and April 8, 2022. The breach involved suspicious activity likely stemming from phishing, leading to credential compromise. Affected data included names and other personal information. CRMHS engaged forensic specialists, implemented safeguards, and offered Equifax credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 469 days

discovery → filing · 6 weeks / 39 days

May 14, 2021

Begins

Aug 26, 2022

Discovered

Oct 4, 2022

Filed

vs. sector median

7 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Washington State AGbd_3d0b1b39da1199ea2022-10-04Verified by operator
Oregon State AGbd_8a46d38470e9032c2022-10-04Verified
Indiana State AGbd_971929d4c26eb7492022-10-04Verified
New Hampshire State AGbd_274084aef9e4928e2022-10-07 · +3dVerified

Name: Columbia River Mental Health Services
norm: columbia river mental health

Name: Columbia River Mental Health Services
norm: columbia river mental health
Industry: Healthcarellm

Discovered: Aug 26, 2022
Breach occurred: May 14, 2021 – Apr 8, 2022
Undetected for: 469 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 13state-resident count only
Data types: PIIIdentity (basic)Credentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Launched an investigation, with the assistance of third-party forensic specialists
Implemented additional safeguards
Continue to review policies and procedures relating to data privacy and security
Providing you with access to credit monitoring and identity protection services through Equifax at no cost
Changes made: Implemented additional safeguards
Continue to review policies and procedures relating to data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(39 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Washington State AGOct 4 · first

Oregon State AGOct 4 · first

Indiana State AGOct 4 · first

Montana State AGOct 4 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-597.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 4, 2022
Raw hash: f5b4fad1562757362f4ff6791fa77ed60e82850ffcf19828c8ddb85d44ce1f41

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityColumbia River Mental Health Services

Victim entityColumbia River Mental Health Services

Incidentdiscovered Aug 26, 2022

Stated responseLaunched an investigation, with the assistance of third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov