HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedIdentity (basic)Health (basic)PHILowContained

South Texas Oncology and Hematology

bd_c22122c88699a7f6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 15, 2024

Filed

Sep 13, 2024

To disclose

30 weeks

Affected

1state residents only

Confidence

65%

South Texas Oncology and Hematology (STOH) suffered a cybersecurity incident discovered on Feb 15, 2024, where an unauthorized actor accessed its network. START, a related entity, notified clinical trial participants in Utah that their names, DOBs, and health data may have been compromised. Credit monitoring and fraud assistance were offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 30 weeks / 211 days

Feb 15, 2024

Discovered

Sep 13, 2024

Filed

vs. sector median

+19 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: South Texas Accelerated Research Therapeutics, L.P.
norm: south texas accelerated research therapeutics
Domain: startresearch.com

Name: South Texas Oncology and Hematology
norm: south texas oncology and hematology
Industry: Healthcarellm

Discovered: Feb 15, 2024
Materiality determined: —
Notification sent: Sep 13, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Health (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Implemented its incident response protocols
Engaged independent cybersecurity experts to assist with securing its network and determining what occurred and whether any data was compromised
Analyzed the potentially impacted data to determine what personal information may have been present
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Employing protective and corrective measures to protect the integrity of our systems infrastructure and data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(211 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1680.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 13, 2024
Raw hash: 7629fd539bde48732f9c3ddd09b0c208696f7dd0e33af76576c3ecfddc39328e

Reporting entitySouth Texas Accelerated Research Therapeutics, L.P.

Victim entitySouth Texas Oncology and Hematology

Incidentdiscovered Feb 15, 2024

Stated responseImplemented its incident response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov