MalwareHealthcareHealthcareRansomwareData EncryptedTargetedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

TriValley Primary Care

bd_db12c7445a73ebb6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 11, 2021

Filed

Nov 23, 2021

To disclose

6 weeks

Affected

6state residents only

Linked

9 records

Confidence

66%

Full breach record for TriValley Primary Care →

TriValley Primary Care notified patients of a ransomware incident discovered on October 11, 2021. The attack impacted networks and servers. Potentially affected data includes demographic info, SSNs, PHI, and financial/insurance details. The FBI was contacted, and forensic experts were engaged. Credit monitoring services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d6 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 6 weeks / 43 days

Oct 11, 2021

Discovered

Nov 23, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 9 records about the same incident.View merged incident

A leak claim by groove about this victim was first seen 32 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitegroovebd_8f00d88f589e8adc2021-10-22 · +32dVerified by operator

Regulatory filings (7) · sorted by filing gap

Massachusetts State AGbd_5493e351799774fd2021-11-23Verified by operator
Maine State AGbd_a109c87c50e4d2872021-11-23Verified
HHS OCRbd_a1e10af133af49312021-11-23Verified
Indiana State AGbd_28314db61f2a77272021-11-24 · +1dVerified by operator

Show 3 more filings ↓up to 48d gap

New Hampshire State AGbd_d568aa2fb9b57c252021-11-29 · +6dVerified by operator
Maine State AGbd_c3d99a75329756c92022-01-06 · +44dVerified
New Hampshire State AGbd_73d56fd3791115e52022-01-10 · +48dVerified by operator

Name: TriValley Primary Care
norm: trivalley primary care
Domain: trivalleypc.com

Name: TriValley Primary Care
norm: trivalley primary care
Domain: trivalleypc.com
Industry: Healthcarellm

Discovered: Oct 11, 2021
Materiality determined: —
Notification sent: Nov 24, 2021
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Contacted the FBI
Initial access: valid_credentials

During the incident: Engaged outside counsel and third-party forensic experts
Contacted the FBI to seek assistance and guidance
Providing access to Single Bureau Credit Monitoring services at no charge
Providing proactive fraud assistance through Cyberscout through Identity Force
Changes made: Implementing additional safeguards to our existing cybersecurity infrastructure
Enhancing our employee cybersecurity training
Working with cybersecurity experts to improve our cybersecurity policies, procedures, and protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 6 states

View merged incident ↗

Massachusetts State AGNov 23 · first

Maine State AGNov 23 · first

HHS OCRNov 23 · first

Montana State AGNov 23 · first · this page

Indiana State AG+1d

New Hampshire State AG+6d

Maine State AG+44d

New Hampshire State AG+48d

Pattern: first filing Nov 23 (MA), last Jan 10 (NH) — a 48-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-102.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 23, 2021
Raw hash: 5467d05fc3bb40c46d8fa76a187c2d8612f3aff0283a798cbc836a74c6d64346

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entityTriValley Primary Care

Victim entityTriValley Primary Care

Incidentdiscovered Oct 11, 2021

Stated responseEngaged outside counsel and third-party forensic experts

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov