HackingHealthcareHealthcareVulnerability ExploitTargetedIdentity (basic)LowContained

Family Practice Center PC

bd_d03604dd55a18df9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 11, 2021

Filed

Jul 7, 2022

To disclose

38 weeks

Affected

3state residents only

Linked

2 filings

Confidence

66%

Full breach record for Family Practice Center PC →

Family Practice Center PC notified Montana residents of a data security incident discovered on October 11, 2021. An attempt to interfere with computer systems largely failed. The incident may have involved names and variable data (likely financial or insurance identifiers), but no patient medical records were accessed. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 38 weeks / 269 days

Oct 11, 2021

Discovered

Jul 7, 2022

Filed

vs. sector median

+26 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_53a1323792a11eb42022-07-11 · +4dCandidate

Name: Family Practice Center PC
norm: family practice center

Name: Family Practice Center PC
norm: family practice center
Industry: Healthcarellm

Discovered: Oct 11, 2021
Materiality determined: —
Notification sent: Jul 7, 2022
Affected individuals: 3state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: reported the incident to law enforcement
Initial access: exploit_public_facing

During the incident: Launched an investigation
Reported the incident to law enforcement
Made adjustments to help prevent the reoccurrence of a similar incident
Changes made: Made adjustments to help prevent the reoccurrence of a similar incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(269 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGJul 7 · first · this page

HHS OCR+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-382.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 7, 2022
Raw hash: dcf1e0e337545ce8b997b55aa707a3f9e699d3d66f0a3a8fd58384441ab6f85c

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFamily Practice Center PC

Victim entityFamily Practice Center PC

Incidentdiscovered Oct 11, 2021

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov