HackingHealthcareProfessional ServicesHealthcareStolen CredentialsCustomer Data InvolvedMulti-Stage ChainPHIHealth (basic)Identity (basic)Financial accountLowContained

Mason Therapy Services

bd_dfb2691e190a2927 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 4, 2024

Filed

Nov 26, 2024

To disclose

22 days

Affected

130state residents only

Confidence

66%

Full breach record for Mason Therapy Services →

Mason Therapy PLLC notified Washington AG of a potential breach of protected health information (PHI) discovered on November 4, 2024. Unauthorized access likely occurred via compromised credentials affecting Proton, Hushmail, Simple Practice, and Phone.com apps. Compromised data includes names, DOBs, diagnostic info, treatment records, and billing info. No specific count of affected individuals was provided.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d22 days discovery → filing

Incident timeline

discovery → filing · 22 days

Nov 4, 2024

Discovered

Nov 26, 2024

Filed

vs. sector median

9 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed130 affectedView incident

Name: Mason Therapy Services
norm: mason therapy
Domain: masontherapyservices.com

Name: Mason Therapy Services
norm: mason therapy
Domain: masontherapyservices.com
Industry: HealthcarellmProfessional Servicesllm

Discovered: Nov 4, 2024
Materiality determined: —
Notification sent: Dec 12, 2024
Affected individuals: 130state-resident count only
Data types: PHIHealth (basic)Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified local law enforcement
Initial access: valid_credentials

During the incident: Notified local law enforcement
Changed all passwords
Factory reset existing devices
Acquired new hardware
Closing all existing accounts
Attaining all new platforms
Changes made: Deployed new hardware with additional security features
Implemented NorbVPN
Switched to HIPAA compliant email (mailhippo)
Switched to Zoom Business version
Moving forward, keeping physical records rather than using a cloud based record keeping system
Continuing to seek counsel about cyber security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM18112.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2024
Raw hash: 911191c4a0f3437b17461373b37086522f9f55bc80003696cf1302417a3b859e

Reporting entityMason Therapy Services

Victim entityMason Therapy Services

Incidentdiscovered Nov 4, 2024

Stated responseNotified local law enforcement

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com