Westminster Ingleside King Farm Presbyterian Retirement Communities, Inc.
bd_ca864a1b1ca609d3 · schema v1 · pii pii-v1
Full breach record for Westminster Ingleside King Farm Presbyterian Retirement Communities, Inc. →Westminster Ingleside King Farm Presbyterian Retirement Communities, Inc. (MD) reported to HHS OCR on 2018-01-19 a Hacking/IT Incident affecting 5,228 individuals. An unauthorized external user accessed the CE's IT network and infected it with malware. Breached PHI was located on Desktop Computer and Network Server, and included names, addresses, dates of birth, Social Security numbers, and clinical information. The CE notified HHS, affected individuals, and media, and offered free credit monitoring. Post-breach, the CE implemented dual-factor authentication and unauthorized-access monitoring. OCR reviewed HIPAA policies and risk analysis.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a2a0fdddd4e3a118Montana State AGfiled 2018-01-19Candidate
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Jan 19, 2018
- Raw hash
- 469b643e76de5610787014aa43ddf36f92cc6dcc6eb691d9444904ee05926723
Source filing
Reporting entity
- Name
- Westminster Ingleside King Farm Presbyterian Retirement Communities, Inc.norm: westminster ingleside king farm presbyterian retirement communities
- Industry
- Health Care Services
Victim entity
- Name
- Westminster Ingleside King Farm Presbyterian Retirement Communities, Inc.norm: westminster ingleside king farm presbyterian retirement communities
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Not extracted — the OCR public portal omits it
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 5,228
- Data types
- HEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- OCR reviewed CE's HIPAA policies and risk analysis for HIPAA compliance.
Compliance
- Compliance flags
- HHS notified
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: not extracted→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.