DisclosureLens
MalwareHealthcareHealthcareRansomwareData EncryptedCustomer Data InvolvedPHIIdentity (basic)Government IDEmploymentMediumContained

Pacific Alliance Medical Center

bd_df2bbf3bcd85420e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 14, 2017

Filed

Aug 11, 2017

To disclose

8 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

66%
Full breach record for Pacific Alliance Medical Center2 incidents on file

Pacific Alliance Medical Center experienced a ransomware attack on June 14, 2017, which encrypted files on its networked computer systems. The incident potentially exposed personal information including names, demographic data, dates of birth, Social Security numbers, and employment information. The organization shut down systems, notified the FBI and relevant health regulators, and engaged forensic investigators. No evidence of unauthorized access to personal data was found, but notification was issued as a precaution. Two years of identity theft protection via Experian was offered to affected individuals.

Incident timeline

discovery → filing · 8 weeks / 58 days

Jun 14, 2017

Begins

Jun 14, 2017

Discovered

Aug 11, 2017

Filed

vs. sector median

4 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings

View merged incident ↗
HHS OCRAug 10 · first
California State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.