Social EngineeringPhishingStolen CredentialsTargetedCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
INTERLINK Health Services, Inc
bd_c70d2e82a8fd714e · schema v1 · pii pii-v1
Full breach record for INTERLINK Health Services, Inc →INTERLINK Health Services, Inc. notified Maryland AG of a phishing incident where an unauthorized actor accessed an employee email account from June 15-17, 2024. The actor searched for financial terms but likely viewed emails containing PHI, including diagnosis, treatment, and billing info. No networks were compromised. INTERLINK secured the account, enhanced safeguards, provided employee training, and offered one year of Experian credit monitoring.
Maryland clock✗ MD AG >90d35 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376387.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 20, 2025
- Raw hash
- 28534be468929b46aaf1840211140a20697f76c35114a68a33651d4c4f5af81e
Reporting entity
- Name
- INTERLINK Health Services, Incnorm: interlink health
- Domain
- interlinkhealth.com
Victim entity
- Name
- INTERLINK Health Services, Incnorm: interlink health
- Domain
- interlinkhealth.com
Incident
- Discovered
- Jun 17, 2024
- Materiality determined
- —
- Notification sent
- Feb 19, 2025
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 35 weeks(248 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.