DisclosureLens
MalwareHealthcareHealthcareRansomwareCapture Stored DataData ExfiltratedData EncryptedTargetedGovernment IDIdentity (basic)Health (basic)PHIMediumResolved

One Community Health

bd_e0a5b3d61a15dd39 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 20, 2021

Filed

Nov 22, 2021

To disclose

31 weeks

Affected

19state residents only

Linked

7 filings

Confidence

63%
Full breach record for One Community Health2 incidents on file

One Community Health experienced a ransomware attack between April 19-20, 2021. The incident was discovered on April 20, 2021, when abnormal network activity was detected by an information systems partner. The investigation concluded on October 6, 2021, confirming the exfiltration of SSNs, names, DOBs, addresses, and PHI (diagnosis/treatment info). No identity fraud was reported. The organization engaged cybersecurity experts, isolated systems, and offered one year of Experian IdentityWorks credit monitoring.

Incident timeline

undetected · 1 days
discovery → filing · 31 weeks / 216 days

Apr 19, 2021

Begins

Apr 20, 2021

Discovered

Nov 22, 2021

Filed

vs. sector median

+18 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Show 1 more filing

Filing propagation · 6 filings · 5 states

View merged incident ↗
California State AGNov 22 · first
Massachusetts State AGNov 22 · first
Washington State AGNov 22 · first
Oregon State AGNov 22 · first
HHS OCRNov 22 · first
Montana State AGNov 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.