MalwareHealthcareTechnologyHealthcareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Government IDFinancial accountHealth (basic)MediumContained

Abeo Solutions Inc.

bd_e4d1e1121b08c89b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 15, 2021

Filed

Oct 13, 2021

To disclose

8 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for Abeo Solutions Inc. →2 incidents on file

Abeo Solutions d/b/a Crystal Practice Management notified Montana residents of a ransomware attack on third-party vendor Netgain. Netgain discovered anomalous activity on Nov 24, 2020, and determined files were accessed on Feb 25, 2021. Abeo discovered on Aug 15, 2021 that patient names, contact info, SSNs, and financial/medical data were accessed. Abeo is offering one year of Equifax credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 171 days

discovery → filing · 8 weeks / 59 days

Feb 25, 2021

Begins

Aug 15, 2021

Discovered

Oct 13, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Washington State AGbd_abab3fba4e81bdaa2021-10-20 · +7dVerified

Name: Abeo Solutions Inc.
norm: abeo solutions

Name: Abeo Solutions Inc.
norm: abeo solutions
Also named: Abeo Solutions, Inc.dba oflegal entity
Crystal Practice Managementdba oftrade name
Industry: HealthcarellmTechnologyllm

Discovered: Aug 15, 2021
Breach occurred: Feb 25, 2021
Undetected for: 171 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Offering a complimentary one-year membership in Equifax Credit WatchTM Gold
Conducted a thorough review of the contents of the acquired files
Working with third-party vendors to enhance security and oversight
Changes made: Working with third-party vendors to enhance security and oversight
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGOct 13 · first · this page

Washington State AG+7d

Pattern: first filing Oct 13 (MT), last Oct 20 (WA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-19.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 13, 2021
Raw hash: a8bd05cf12927758f4c42a996d1be1ae72614e0b267ff315d5e643803e775773

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAbeo Solutions Inc.

Victim entityAbeo Solutions Inc.

Incidentdiscovered Aug 15, 2021

Stated responseOffering a complimentary one-year membership in Equifax Credit WatchTM Gold

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov