DisclosureLens
MalwareHealthcareHealthcareCustomer Data InvolvedEmployee Data InvolvedPHIHealth (basic)Government IDFinancial accountIdentity (basic)MediumContained

Partners HealthCare System, Inc.

bd_e43e340283e6dea2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 8, 2017

Filed

Feb 5, 2018

To disclose

39 weeks

Affected

2state residents only

Linked

3 filings

Confidence

65%
Full breach record for Partners HealthCare System, Inc.3 incidents on file

Partners HealthCare System, Inc. notified the NH Attorney General of a security incident involving malware detected on May 8, 2017. The malware may have resulted in unauthorized access to data on affected computers between May 8 and May 17, 2017. The incident potentially affected 2 New Hampshire residents, exposing personal information (name, SSN, financial account info) and protected health information. Partners engaged forensic consultants, contained the malware, and offered one year of credit monitoring.

Incident timeline

discovery → filing · 39 weeks / 273 days

May 8, 2017

Begins

May 8, 2017

Discovered

Feb 5, 2018

Filed

vs. sector median

+26 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 2 states

View merged incident ↗
HHS OCRFeb 5 · first
New Hampshire State AGFeb 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.