HackingHealthcareHealthcareStolen CredentialsTargetedIdentity (basic)Government IDPHIHealth (basic)MediumContained

AdventHealth

bd_ede3ebcec718f103 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 27, 2018

Filed

Jan 25, 2019

To disclose

29 days

Affected

4state residents only

Linked

2 filings

Confidence

65%

Full breach record for AdventHealth →4 incidents on file

AdventHealth Medical Group notified Montana residents of a data breach where an unauthorized third party accessed systems at a pulmonary clinic starting August 2017. Discovered Dec 27, 2018. Exposed PHI, SSNs, and PII. Kroll engaged for credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 513 days

discovery → filing · 29 days

Aug 1, 2017

Begins

Dec 27, 2018

Discovered

Jan 25, 2019

Filed

vs. sector median

7 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_54749675f6d67b2c2019-01-25Verified

Name: AdventHealth
norm: adventhealth
Domain: adventhealth.com

Name: AdventHealth
norm: adventhealth
Domain: adventhealth.com
Industry: Healthcarellm

Discovered: Dec 27, 2018
Breach occurred: Aug 1, 2017
Undetected for: 513 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took steps to secure our systems
Began an investigation into this incident
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Changes made: Implementing improved processes to enhance auditing and system safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJan 25 · first

Montana State AGJan 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/adv.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 25, 2019
Raw hash: 5c9ebdd2fd3a4c16356c2891c16f4ea36857d62544693e382292e07fea248146

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAdventHealth

Victim entityAdventHealth

Incidentdiscovered Dec 27, 2018

Stated responseTook steps to secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov