MalwareHealthcareHealthcareRansomwareStolen CredentialsData EncryptedTargetedIdentity (basic)Government IDHealth (basic)PHIMediumContained

MSK Group

bd_d97d53a73d61bc36 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 7, 2018

Filed

Jul 5, 2018

To disclose

8 weeks

Affected

8state residents only

Linked

4 filings

Confidence

66%

Full breach record for MSK Group →

MSK Group, P.C., a physician practice group, notified the NH Attorney General of a security event discovered on May 7, 2018. Unauthorized access occurred over several months, resulting in data encryption. Notification letters were sent to 8 NH residents on July 5, 2018. Affected data included names, SSNs, DOBs, and PHI. MSK engaged consultants, reported to the FBI, and offered 1 year of identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 59 days

May 7, 2018

Discovered

Jul 5, 2018

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_bbf341c45b4ddaef2018-07-05Verified
California State AGbd_ffa55054fea20f332018-07-05Candidate
HHS OCRbd_f5ad55829dac875e2018-05-22 · +44dVerified

Name: MSK Group
norm: msk group
Domain: mskgroup.com
Industry: Healthcare

Name: MSK Group
norm: msk group
Domain: mskgroup.com
Industry: Healthcare
Industry: Healthcarellm

Discovered: May 7, 2018
Materiality determined: —
Notification sent: Jul 5, 2018
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notifying The United States Department of Health & Human Services, Office for Civil Rights pursuant to the HIPAA - HITECH Breach Notification RegulationsReported this to the FBI
Initial access: valid_credentials

During the incident: Hired expert consultants to investigate, mitigate, and assess the extent of this event
Reported this to the FBI
Taking steps to further secure patient information
Offering 1-year of free Identity Theft Protection services that include credit monitoring and a $1 million insurance reimbursement policy
Changes made: Taking steps to further secure patient information
Offering 1-year of free Identity Theft Protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

HHS OCRMay 22 · first

Massachusetts State AG+44d

California State AG+44d

New Hampshire State AG+44d · this page

Pattern: first filing May 22 (TN), last Jul 5 (NH) — a 44-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/msk-20180705.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 5, 2018
Raw hash: f5fa6d6c00cc4c5e4904729c659da57e96d44f8cd89b88ef7c77103df41b5a69

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMSK Group

Victim entityMSK Group

Incidentdiscovered May 7, 2018

Stated responseHired expert consultants to investigate, mitigate, and assess the extent of this event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov