Social EngineeringPhishingCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Avalon Health Care Management, Inc.
bd_cadd3271c293c23b · schema v1 · pii pii-v1
Full breach record for Avalon Health Care Management, Inc. →Avalon Health Care Management, Inc. notified South Carolina residents of a data security incident involving unauthorized access to an employee's email account. The breach, discovered on July 9, 2019, exposed personal information of patients and employees, including names, addresses, and government IDs. The company engaged forensic experts, reported the incident to consumer reporting agencies, and offered 12 months of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5ce4b91245dcff34Montana State AGfiled 2020-03-16Candidate
- bd_6b904a8d855409e1Washington State AGfiled 2020-03-16Verified
- bd_de5bdb6e7f1d959eOregon State AGfiled 2020-03-16Verified by operator
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2020/AvalonHealthcare.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 16, 2020
- Raw hash
- 8efbf8e42ea4816d8ae07ed6b15adfe504f93071764d2e65f9062d60a2fd3071
Reporting entity
- Name
- Avalon Health Care Management, Inc.norm: avalon health care management
Victim entity
- Name
- Avalon Health Care Management, Inc.norm: avalon health care management
Incident
- Discovered
- Jul 9, 2019
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 36 weeks(251 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.