Social EngineeringHealthcareTechnologyHealthcarePhishingCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

ZOLL Medical

bd_e7b2e2e6ac542608 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 18, 2023

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for ZOLL Medical →5 incidents on file

ZOLL Medical Corporation experienced a sophisticated email phishing attack targeting an employee. The incident, which occurred on August 2, 2023, resulted in the exposure of personal information including names, addresses, Social Security numbers, and health information. The company contained the incident and engaged third-party experts. Affected individuals were notified in December 2023 and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 2, 2023

Begins

Dec 18, 2023

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_1e370c3e36447c972023-12-18Verified
Maine State AGbd_26fde992b4fcaffd2023-12-18Verified
South Carolina State AGbd_8485f156a51ac4122023-12-18Verified
Massachusetts State AGbd_a2ae335c779d3c9d2023-12-18Verified

Show 2 more filings ↓

HHS OCRbd_c0fa4895e0cb5c0d2023-12-18Verified
Montana State AGbd_fdc78ee1cd2eeaba2023-12-18Verified

Name: ZOLL Medical
norm: zoll medical
Domain: zoll.com

Name: ZOLL Medical
norm: zoll medical
Domain: zoll.com
Industry: HealthcarellmTechnologyllm

Discovered: —
Breach occurred: Aug 2, 2023
Materiality determined: —
Notification sent: Dec 18, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Took steps to contain and mitigate the incident
Consulted third-party experts to assist with our response
Changes made: Offering access to free credit monitoring and identity theft protection services through Experian IdentityWorks for 36 months
Offering access to free credit monitoring and identity theft protection services through Experian IdentityWorks for 24 months
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Vermont State AGDec 18 · first

Maine State AGDec 18 · first

South Carolina State AGDec 18 · first

Massachusetts State AGDec 18 · first

HHS OCRDec 18 · first

Montana State AGDec 18 · first

California State AGDec 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-578075
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 18, 2023
Raw hash: 44ff6bd927378a613eff920ac2e913786bf0bf2e177c4f38b91f8a21bb314c6e

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityZOLL Medical

Victim entityZOLL Medical

IncidentPhishing

Stated responseTook steps to contain and mitigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov