Conifer Revenue Cycle Solutions, LLC
bd_cdf3a37f0e4bf53f · schema v1 · pii pii-v1
Full breach record for Conifer Revenue Cycle Solutions, LLC →Conifer Revenue Cycle Solutions, LLC, a business associate of USC, experienced a data security incident involving unauthorized access to a Microsoft Office 365 business email account. The unauthorized access occurred on January 20, 2022, and was discovered by Conifer on April 14, 2022. USC was notified on August 12, 2022. The incident potentially exposed personal information of 7 New Hampshire residents, including names, SSNs, financial account numbers, and health information. Conifer reset passwords, blocked malicious IPs, and accelerated MFA implementation. IDX provided 12 months of identity protection services.
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/usc-keck-conifer-revenue-cycle-solutions-20220930.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 30, 2022
- Raw hash
- 9c68b43c7fcc6d18561f403095ca17757c0786c754c18c2b875ceba56a75189d
Reporting entity
- Name
- UNIVERSITY OF SOUTHERN CALIFORNIAnorm: university of southern california
Victim entity
- Name
- Conifer Revenue Cycle Solutions, LLCnorm: conifer revenue cycle
Incident
- Discovered
- Apr 14, 2022
- Materiality determined
- —
- Notification sent
- Sep 30, 2022
- Affected individuals
- 7
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Reported to the Department of Health and Human Services Office for Civil Rights
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 24 weeks(169 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.