MalwareHealthcareHealthcareRansomwareEkingData EncryptedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)PHIHighResolved

MK Periodontics and Implants

bd_df3f316d3efa82bc · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 30, 2020

Filed

Oct 29, 2020

To disclose

9 weeks

Affected

8,000state residents only

Linked

2 filings

Confidence

69%

Full breach record for MK Periodontics and Implants →

MK Periodontics and Implants reported a ransomware attack affecting 8,000 Washington residents. The incident occurred between August 14 and September 5, 2020, with discovery on August 30, 2020. Patient data including PHI, SSNs, and credit card info was encrypted. The organization engaged forensic consultants, hired new IT management, and implemented new security safeguards. Notification to individuals began October 29, 2020.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d9 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 16 days

discovery → filing · 9 weeks / 60 days

Aug 14, 2020

Begins

Aug 30, 2020

Discovered

Oct 29, 2020

Filed

vs. sector median

on median

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_872e9db4bfec174c2020-10-29Verified

Name: MK Periodontics and Implants
norm: mk periodontics and implants

Name: MK Periodontics and Implants
norm: mk periodontics and implants
Industry: Healthcarellm

Discovered: Aug 30, 2020
Breach occurred: Aug 14, 2020 – Sep 5, 2020
Undetected for: 16 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 29, 2020
Affected individuals: 8,000state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Data elements: NameSocial Security numberFinancial account numberDate of birthMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed breach notification via the website of the Office for Civil Rights (OCR) at the Department of Health and Human Services
Initial access: valid_credentials

During the incident: Engaged Legal Counsel
Engaged DataWorks Consulting on September 9th, 2020 to perform full network scan and assessment
Informed Malpractice Insurance
Hired a consultant, Harris Biomedical, on October 18th, 2020 to help perform a new risk analysis
Hired a new IT company, Uptime Solutions to take over management of MK Periodontics and Implants IT systems
Changes made: Adopted encryption technologies
Changed password/strengthened password requirements
Implemented new technical safeguards
Took steps to mitigate harm
Installment of a new firewall system
Approval of a bid to replace the existing in office computer network system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCROct 29 · first

Washington State AGOct 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10353.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 29, 2020
Raw hash: 800c391712d2ed7b5678605770bb9bf0f4dbdcecdca5fe810cbd4e55c1bd3402

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMK Periodontics and Implants

Victim entityMK Periodontics and Implants

Incidentdiscovered Aug 30, 2020

Stated responseEngaged Legal Counsel

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com