HackingTechnologyHealthcareInformationTargetedPIIIdentity (basic)PHIHealth (basic)LowContained

Ravkoo

bd_e92fcd9fc02d394a · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 27, 2021

Filed

Jan 3, 2022

To disclose

14 weeks

Affected

611state residents only

Linked

11 filings

Confidence

66%

Full breach record for Ravkoo →

Ravkoo, a digital SaaS platform for prescription fulfillment, notified Montana residents of a cybersecurity attack on its AWS portal detected on September 27, 2021. The incident may have exposed names, addresses, phone numbers, and limited medical/prescription information. No SSN was accessed. Ravkoo provided one year of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 98 days

Sep 27, 2021

Discovered

Jan 3, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_2ce90ff564900d0d2022-01-03Verified
HHS OCRbd_3dd01437251dd7992022-01-03Verified
Washington State AGbd_4b4f4f311c81eaee2022-01-03Verified
California State AGbd_d601b80a961402702022-01-03Verified

Show 6 more filings ↓up to 2d gap

New Hampshire State AGbd_d90f0cc5f913c2be2022-01-03Verified
Indiana State AGbd_fc5c1d10a6aef0942022-01-03Verified
South Carolina State AGbd_b1c21d4401605dcb2022-01-04 · +1dVerified
Oregon State AGbd_e271be692c34e9322022-01-05 · +2dVerified
Maine State AGbd_e4f82f363cdb12182022-01-05 · +2dVerified
Illinois State AGbd_a6db1f6b29469b452022-01-01 · +2dCandidate

Name: Ravkoo
norm: ravkoo

Name: Ravkoo
norm: ravkoo
Industry: TechnologyllmHealthcarellm

Discovered: Sep 27, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 611state-resident count only
Data types: PIIIdentity (basic)PHIHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Arranged for you to receive a complementary, online identity monitoring service for one year provided by Kroll Information Assurance, LLC
Actively assessing ways we can further improve our cybersecurity posture
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(98 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Illinois State AGJan 1 · first

Massachusetts State AG+2d

HHS OCR+2d

Washington State AG+2d

California State AG+2d

New Hampshire State AG+2d

Indiana State AG+2d

Montana State AG+2d · this page

South Carolina State AG+3d

Oregon State AG+4d

Maine State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-162.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 3, 2022
Raw hash: 69232c9fb73d3dc036e8aaf1ca530a1c0c56179e41d2247582efb031ccf4713f

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityRavkoo

Victim entityRavkoo

Incidentdiscovered Sep 27, 2021

Stated responseArranged for you to receive a complementary, online identity monitoring service for one year provided by Kroll Information Assurance, LLC

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov