HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)PHIHealth (basic)MediumContained

EmCare, Inc.

bd_d4600b10323dbabf · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 4, 2019

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for EmCare, Inc. →2 incidents on file

EmCare, Inc. and affiliates reported unauthorized access to employee email accounts. The incident occurred on September 24, 2018. Affected data included names, Social Security numbers, driver's license numbers, and limited clinical information for patients and employees. The company launched an investigation, retained forensic experts, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 24, 2018

Begins

May 4, 2019

Filed

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_d2cab30b1dbb4e2d2019-05-04Verified by operator
New Hampshire State AGbd_1cc53e55aa5d94392019-05-03 · +1dCandidate
Montana State AGbd_9ef7d63dcf6ed1932019-05-03 · +1dVerified by operator
HHS OCRbd_46b4d052869a6b2b2019-04-20 · +14dVerified by operator

Show 2 more filings ↓up to 116d gap

New Hampshire State AGbd_2c6274f2eb73b8bc2019-04-12 · +22dCandidate
New Hampshire State AGbd_3d2d49eb557b834a2019-08-28 · +116dVerified

Name: EmCare, Inc.
norm: emcare

Name: EmCare, Inc.
norm: emcare
Industry: Healthcarellm

Discovered: —
Breach occurred: Sep 24, 2018
Materiality determined: —
Notification sent: May 3, 2019
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)PHIHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1114 Email CollectionT1078 Valid Accounts
Threat actor: External

During the incident: Launched a comprehensive investigation to determine the scope of the issue and who is impacted
Retained a security firm to assist
Retained a leading forensic security firm to assist
Offering a complimentary one-year membership of Experian IdentityWorks Credit 3B
Changes made: Implementing advanced information technology (IT) solutions
Providing all employees with further training and reminders about email and IT security
Implementing certain technology solutions such as Advanced Threat Protection
Providing all staff further training and reminders about email and internet technology security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

New Hampshire State AGApr 12 · first

HHS OCR+8d

New Hampshire State AG+21d

Montana State AG+21d

Massachusetts State AG+22d

California State AG+22d · this page

New Hampshire State AG+138d

Pattern: first filing Apr 12 (NH), last Aug 28 (NH) — a 138-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-146901
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 4, 2019
Raw hash: 6b2d65d4fa265a2516f51984c2f4ed00535fa9628c81caade42d4322ba9b3fb5

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityEmCare, Inc.

Victim entityEmCare, Inc.

IncidentUnauthorized Access

Stated responseLaunched a comprehensive investigation to determine the scope of the issue and who is impacted

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov