MalwareHealthcareHealthcareRansomwareData ExfiltratedTargetedPHIHealth (basic)Identity (basic)LowContained

Sutton Dental Arts

bd_e13a7ab4c56048a7 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 1, 2024

Filed

Jul 22, 2024

To disclose

16 weeks

Affected

10state residents only

Linked

4 filings

Confidence

65%

Full breach record for Sutton Dental Arts →

Sutton Dental Arts notified Washington AG of a ransomware incident in April 2024. Malicious file encryption rendered systems inaccessible. An unknown actor gained access to limited systems, potentially exposing PHI, names, and addresses. The company engaged forensic specialists, restored systems, and offered 12 months of identity theft protection via IDX.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d16 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 16 weeks / 112 days

Apr 1, 2024

Discovered

Jul 22, 2024

Filed

vs. sector median

+5 wks slower

This filing is one of 4 about the same incident.View merged incident

A leak claim by medusa about this victim predates this filing by 109 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_1dcd7196677320552024-04-03 · +109dVerified

Regulatory filings (2) · sorted by filing gap

Oregon State AGbd_6f393c9eb3b5e0ff2024-07-22Verified by operator
HHS OCRbd_862792375f0c32d52024-07-22Verified

Name: Sutton Dental Arts
norm: sutton dental arts

Name: Sutton Dental Arts
norm: sutton dental arts
Industry: Healthcarellm

Discovered: Apr 1, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 10state-resident count only
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Launched an extensive investigation, aided by third party computer forensic specialists
Secure our systems, restore access to the information and investigate what happened
Offering identity theft protection services through IDX, A ZeroFox Company
12 Months of credit and CyberScan monitoring
$1,000,000 Insurance reimbursement policy
Fully managed id theft recovery services
Changes made: Reviewed our internal data management and protocols
Implemented enhanced security measures to help prevent this type of incident from recurring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(112 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Oregon State AGJul 22 · first

HHS OCRJul 22 · first

Washington State AGJul 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA29921.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2024
Raw hash: 35a6d11e90e536ee999128c53eb66a031ecb7f5dd7d93b073af629ab3cdab0bb

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entitySutton Dental Arts

Victim entitySutton Dental Arts

Incidentdiscovered Apr 1, 2024

Stated responseLaunched an extensive investigation, aided by third party computer forensic specialists

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com