HackingHealthcareHealthcareCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedEmployee Data InvolvedDelayed DiscoveryPIIIdentity (basic)Government IDEmploymentMediumContained

Advocate Sherman Hospital

bd_d09fce1f635401dc · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 13, 2019

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

78%

Full breach record for Advocate Sherman Hospital →

Advocate Sherman Hospital notified individuals that its former service provider Jobscience (Bullhorn, Inc.) suffered a data breach in or around May 2018, in which an unauthorized third party gained access to and acquired data from Jobscience's server used to process job applications. Data involved included names, contact information, dates of birth, resumes, and Social Security Numbers. Individuals were notified in March 2019 after the hospital confirmed involvement in February 2019.

J jump to incidentP pin to compareR raw source

Incident timeline

May 8, 2018

Begins

Mar 13, 2019

Filed

This filing is one of 3 about the same incident.View merged incident

Part of JobScience supply-chain incident (2018) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_f05eead4bb0b9b142019-03-18 · +5dVerified
Montana State AGbd_1973f4901cf3b97a2019-03-08 · +5dCandidate

Name: Advocate Sherman Hospital
norm: advocate sherman hospital

Name: Advocate Sherman Hospital
norm: advocate sherman hospital
Industry: Healthcarellm

Discovered: —
Breach occurred: May 8, 2018
Materiality determined: —
Notification sent: Mar 1, 2019
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1195 Supply Chain Compromise
Threat actor: External
Third party: via Bullhorn, Inc.'s Jobscience
Initial access: supply_chain

During the incident: Terminated business relationship with Jobscience
Jobscience remedied the underlying cause of the unauthorized access
Jobscience forced a password reset for all active accounts
Jobscience taken steps to implement additional security controls
Law enforcement notified of the incident by Jobscience
Jobscience retained IDnotify (a credit monitoring service by Experian) to provide 12 months of free credit monitoring to affected individuals
Changes made: No longer has a business relationship with Jobscience
Jobscience committed to remedying the underlying cause of the unauthorized access
Jobscience forced a password reset for all active accounts
Jobscience taken steps to implement additional security controls
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGMar 8 · first

California State AG+5d · this page

Massachusetts State AG+10d

Pattern: first filing Mar 8 (MT), last Mar 18 (MA) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-145430
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 13, 2019
Raw hash: ccdad57bcdfe8e9454c46d7d5ec1ddcda3cdc02b926fa2f91668aae35fed9d00

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAdvocate Sherman Hospital

Victim entityAdvocate Sherman Hospital

IncidentThird-Party / Supply Chain

Stated responseTerminated business relationship with Jobscience

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov