Shields Health Solutions
bd_f4afa3fde068325b · schema v1 · pii pii-v1
Full breach record for Shields Health Solutions →Shields Health Care Group, Inc. reported that an unknown actor gained unauthorized access to certain systems from March 7, 2022, to March 21, 2022. The company was alerted to suspicious activity on March 28, 2022. The investigation revealed that certain data was acquired by the actor. Shields provides management and imaging services for health care facilities. Affected data may include personal and health information. Shields activated incident response protocols, notified law enforcement, engaged third-party forensics, rebuilt systems, and offered 24 months of identity monitoring through Kroll.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8e834a0cb07d4cf9Vermont State AGfiled 2023-04-19Verified
- bd_0c28877aa5207752New Hampshire State AGfiled 2023-04-24(5d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-565730
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 19, 2023
- Raw hash
- 8f51f7344a3cb9feb48beefb4ce2d0fc5d197c4af566b9d9f95f27dd69683fbe
Reporting entity
- Name
- Shields Health Solutionsnorm: shields health
- Domain
- shieldshealthsolutions.com
Victim entity
- Name
- Shields Health Solutionsnorm: shields health
- Domain
- shieldshealthsolutions.com
Incident
- Discovered
- Mar 28, 2022
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Provided notices to some individuals and regulators last year
Compliance
- Time to disclose
- 13 months(387 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.