Wilmington Surgical Associates
bd_df92dd255f1dd172 · schema v1 · pii pii-v1
Full breach record for Wilmington Surgical Associates →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Netwalker on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Oct 1, 2020
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- HHS OCRbd_b514594e8e40c6302020-12-17 · +77dVerified
- Illinois State AGbd_771d6418c92f04712021-01-01 · +92dVerified by operator
- Maine State AGbd_17c1819a6bcba3522021-01-08 · +99dVerified by operator
- Massachusetts State AGbd_5ad7b2ab97139db82021-01-08 · +99dVerified
Show 1 more filing ↓Show fewer ↑up to 274d gap
- Illinois State AGbd_66fd2565851ed9ed2020-01-01 · +274dVerified by operator
Filing propagation · 5 filings · 4 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Jan 8 (MA) — a 373-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
netwalker
According to ransomware.live, NetWalker ransomware group operates by the threat actor known as "CIRCUS SPIDER". The NetWalker ransomware was discovered in 2019. The group mainly targeting the Asia Pacific region but can attack globally. The group uses common attacking tools like Mimikatz and other legitimate tools (LOLBINS) like PSTools, AnyDesk, TeamViewer, NLBrute, and more. The group knowing by targeting the healthcare sector. Finally, in January 2021, Netwalker was takedown by the authorities, the police have confiscated hundreds of thousands of dollars in ransom payments collected by the Netwalker group, and they seized servers and disrupted the infrastructure and the darknet websites of the Netwalker ransomware group.