Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumContained

The Good Life Medical Staff LLC

bd_ca0ca9ca537d79a4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 15, 2024

Filed

Feb 28, 2025

To disclose

19 weeks

Affected

1state residents only

Linked

4 filings

Confidence

67%

Full breach record for The Good Life Medical Staff LLC →

The Good Life Medical Staff LLC, a travel nursing staffing agency, notified the Maryland Attorney General of a cybersecurity incident discovered on October 15, 2024. Unauthorized access to an employee email account likely exposed names, addresses, SSNs, driver's licenses, and health insurance info. One Maryland resident was affected. TGL engaged forensic investigators, enhanced security controls (MFA, 2FA), and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maryland clock✗ MD AG >90d19 weeks discovery → filing

Incident timeline

discovery → filing · 19 weeks / 136 days

Oct 15, 2024

Discovered

Feb 28, 2025

Filed

vs. sector median

+2 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Nebraska State AGbd_7a383ff210f89a552025-03-03 · +3dVerified
Indiana State AGbd_b392fa99705f2e8c2025-03-03 · +3dVerified
Montana State AGbd_b3ee538832065e7c2025-03-03 · +3dCandidate

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: The Good Life Medical Staff LLC
norm: the good life medical staff
Industry: Professional Servicesllm

Discovered: Oct 15, 2024
Materiality determined: —
Notification sent: Mar 3, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Maryland Office of the Attorney General
Initial access: phishing_link

During the incident: Engaged a specialized cybersecurity firm to conduct a forensic investigation
Hired a third party IT team to have 24/7/365 monitoring of its systems
Changed all passwords
Retained law firm
Offered twelve (12) months of complimentary credit monitoring and identity theft restoration services through Transunion
Changes made: Changing into a new tenet
MFA additions
Added two step authorization process to other software systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(136 days from discovery to filing)
Compliance flags: MD AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maryland State AGFeb 28 · first · this page

Nebraska State AG+3d

Indiana State AG+3d

Montana State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376436.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 28, 2025
Raw hash: 07b907f1d30459e03c90bac6a51ccbad9123ba1c9fae221a00631689322287ad

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityThe Good Life Medical Staff LLC

Incidentdiscovered Oct 15, 2024

Stated responseEngaged a specialized cybersecurity firm to conduct a forensic investigation

ComplianceMD AG >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov