Social EngineeringHealthcareHealthcarePhishingBECTargetedCustomer Data InvolvedIdentity (basic)Government IDMediumActive

Steward Health Care System LLC

bd_e9364122f1bc5c88 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 12, 2019

Filed

Jun 4, 2019

To disclose

8 weeks

Affected

81state residents only

Linked

3 filings

Confidence

67%

Full breach record for Steward Health Care System LLC →9 incidents on file

Steward Health Care System LLC notified the NH AG of a phishing incident where an employee's email was compromised to request a wire transfer. An attachment containing vendor names, addresses, and EINs/SSNs was found. 81 NH residents affected. Notification sent June 4, 2019. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 53 days

Apr 12, 2019

Discovered

Jun 4, 2019

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_3a103078f2ac955c2019-06-04Verified
Montana State AGbd_fbf9558e387bf5202019-06-04Candidate

Name: Steward Health Care System LLC
norm: steward health care system

Name: Steward Health Care System LLC
norm: steward health care system
Industry: Healthcarellm

Discovered: Apr 12, 2019
Materiality determined: —
Notification sent: Jun 4, 2019
Affected individuals: 81state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Initiated an investigation
Took steps to eradicate the attacker from its network
Reset the employee’s email account password
Temporarily disabled the account
Engaged a leading cybersecurity forensic vendor
Offered 12 months of complementary credit monitoring and other identity theft protection services
Changes made: Assess the findings of the investigation as part of our persistent efforts to identify and prevent cybersecurity threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(53 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJun 4 · first

Montana State AGJun 4 · first

New Hampshire State AGJun 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/steward-health-care-20190604.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 4, 2019
Raw hash: 14a9cdb10e522ed9742660e71730a4ea928f323fff33ae6a9138f2446b56b81a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySteward Health Care System LLC

Victim entitySteward Health Care System LLC

Incidentdiscovered Apr 12, 2019

Stated responseInitiated an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov