DisclosureLens
MalwareHealthcareHealthcareRansomwareData EncryptedRansom DemandedCustomer Data InvolvedPHIIdentity (basic)Government IDHealth (basic)MediumContained

Woodlawn Dental Center

bd_da0e5a3f32668b0f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 19, 2020

Filed

May 18, 2020

To disclose

9 weeks

Affected

3state residents only

Linked

5 filings

Confidence

66%
Full breach record for Woodlawn Dental Center →

Woodlawn Dental Center, a private dental practice in Cambridge, OH, suffered a ransomware attack on March 19, 2020. The attack encrypted computer systems containing electronic healthcare records, including names, addresses, dates of birth, Social Security numbers, and medical insurance information for three New Hampshire residents. The organization restored systems from backups and did not pay the ransom. No evidence suggests data was accessed or exfiltrated. Affected residents were offered one year of identity protection services.

Incident timeline

discovery → filing · 9 weeks / 60 days

Mar 19, 2020

Begins

Mar 19, 2020

Discovered

May 18, 2020

Filed

vs. sector median

1 wks faster

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Montana State AGMay 18 · first
HHS OCRMay 18 · first
Massachusetts State AGMay 18 · first
Indiana State AGMay 18 · first
New Hampshire State AGMay 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.