HackingHealthcareHealthcareStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Ezras Choilim Health Center, now Aizer Health

bd_f70f48a4d40dfdbb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 18, 2023

Filed

May 8, 2024

To disclose

33 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Ezras Choilim Health Center, now Aizer Health →

Ezras Choilim Health Center (now Aizer Health) notified Montana residents of a data breach occurring on September 18, 2023. Unauthorized actors accessed systems containing names, addresses, SSNs, driver's licenses, medical info, and credit card numbers. The company engaged forensic investigators, reset credentials, and established a SOC. Affected individuals were offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 33 weeks / 233 days

Sep 18, 2023

Begins

Sep 18, 2023

Discovered

May 8, 2024

Filed

vs. sector median

+21 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Ezras Choilim Health Center, now Aizer Health
norm: ezras choilim health center now aizer health

Name: Ezras Choilim Health Center, now Aizer Health
norm: ezras choilim health center now aizer health
Industry: Healthcarellm

Discovered: Sep 18, 2023
Breach occurred: Sep 18, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 2, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Disconnected all access to the network
Engaged a specialized third-party cybersecurity firm and IT personnel
Conducted a comprehensive forensic investigation
Implemented a credential reset
Restored operations in a safe and secure mode
Enhanced its security measures
Implemented a security operation center (SOC)
Changes made: Implemented a security operation center (SOC) responsible for monitoring, detecting, responding to, and mitigating security threats
Proactive threat detection
Swift incident response
Round-the-clock vigilance
Risk reduction
Security intelligence
Incident investigation services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(233 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1346.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 8, 2024
Raw hash: faff8f171cd4465a475369dab0dd56f5afaa8fe160cec763ad5b605a3161252f

Reporting entityEzras Choilim Health Center, now Aizer Health

Victim entityEzras Choilim Health Center, now Aizer Health

Incidentdiscovered Sep 18, 2023

Stated responseDisconnected all access to the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov