HackingHealthcareTechnologyHealthcareStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedIdentity (basic)LowContained

Greater Rochester Independent Practice Association, Inc.

bd_f2c0167e4b2f11e0 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 31, 2023

Filed

Oct 5, 2023

To disclose

18 weeks

Affected

15state residents only

Linked

7 filings

Confidence

66%

Full breach record for Greater Rochester Independent Practice Association, Inc. →3 incidents on file

Greater Rochester Independent Practice Association, Inc. (GRIPA) notified Montana residents of a data breach involving the MOVEit file transfer tool. GRIPA learned of a global attack on May 31, 2023, confirmed data exfiltration on June 5, 2023, and identified impacted personal information (names) by August 14, 2023. GRIPA patched the software, restored servers, and offered identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 weeks / 127 days

May 31, 2023

Discovered

Oct 5, 2023

Filed

vs. sector median

+6 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_b10a9e7a07140eda2023-07-12 · +85dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_839edcb1cb07ad7a2023-10-05Verified
Maine State AGbd_add1e3379cca25e92023-10-05Verified
Massachusetts State AGbd_0073b50b305b44082023-10-10 · +5dVerified
New Hampshire State AGbd_f85fb6667c7d0b6b2023-10-10 · +5dVerified

Show 1 more filing ↓up to 277d gap

Illinois State AGbd_9909f7b9534771402023-01-01 · +277dCandidate

Name: Greater Rochester Independent Practice Association, Inc.
norm: greater rochester independent practice
Domain: gripa.org

Name: Greater Rochester Independent Practice Association, Inc.
norm: greater rochester independent practice
Domain: gripa.org
Industry: HealthcarellmTechnologyllm

Discovered: May 31, 2023
Materiality determined: —
Notification sent: Oct 5, 2023
Affected individuals: 15state-resident count only
Data types: Identity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: supply_chain

During the incident: Stopped access to MOVEit
Conducted a forensic investigation
Worked with a vendor to review files for personal information
Securely restored servers from backups
Applied the patch provided by the MOVEit software provider, Progress
Offering identity theft protection services through IDX
Changes made: Securely restored our servers from backups
Applied the patch provided by the MOVEit software provider, Progress
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(127 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+277d

Maine State AG+277d

Montana State AG+277d · this page

Massachusetts State AG+282d

New Hampshire State AG+282d

Pattern: first filing Jan 1 (IL), last Oct 10 (NH) — a 282-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-749.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 5, 2023
Raw hash: 7a1a04b557e0a53fd03de8694bff505a102b607e6d6653ba0905388d34f165c1

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityGreater Rochester Independent Practice Association, Inc.

Victim entityGreater Rochester Independent Practice Association, Inc.

Incidentdiscovered May 31, 2023

Stated responseStopped access to MOVEit

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov