Social EngineeringHealthcareHealthcarePhishingTargetedIdentity (basic)Government IDMediumActive

Steward Health Care System LLC

bd_fbf9558e387bf520 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 12, 2019

Filed

Jun 4, 2019

To disclose

8 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Steward Health Care System LLC →9 incidents on file

Steward Health Care System LLC notified Montana vendors of a data breach where an unauthorized person accessed an employee email account on April 12, 2019. The attacker accessed an attachment containing vendor PII (name, address, EIN/TIN). Forensic investigation was ongoing with no evidence of misuse found. 12 months of credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 53 days

Apr 12, 2019

Discovered

Jun 4, 2019

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_3a103078f2ac955c2019-06-04Verified
New Hampshire State AGbd_e9364122f1bc5c882019-06-04Verified

Name: Steward Health Care System LLC
norm: steward health care system

Name: Steward Health Care System LLC
norm: steward health care system
Industry: Healthcarellm

Discovered: Apr 12, 2019
Materiality determined: —
Notification sent: Jun 4, 2019
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Immediately began an investigation
Quickly terminated the unauthorized person’s access
Enlisted the assistance of a leading cybersecurity forensics firm to investigation this matter
Offer you 12 months of credit monitoring from Experian at no cost to you
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(53 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJun 4 · first

New Hampshire State AGJun 4 · first

Montana State AGJun 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-7.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 4, 2019
Raw hash: ae7325071f844dca7ca80cd74c7deef5a5d3efa26b0e438a6ce23a66e6148ee3

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySteward Health Care System LLC

Victim entitySteward Health Care System LLC

Incidentdiscovered Apr 12, 2019

Stated responseImmediately began an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov