MalwareHealthcareHealthcareRansomwareRansom DemandedData EncryptedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Peachtree Neurological Clinic, P.C.

bd_ff0326c25871d5c3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 1, 2017

Filed

Jul 6, 2017

To disclose

—

Affected

13state residents only

Linked

5 filings

Confidence

64%

Full breach record for Peachtree Neurological Clinic, P.C. →

Peachtree Neurological Clinic, P.C. notified patients of a data security incident involving ransomware infection of its EMR system. Unauthorized access occurred between Feb 2016 and May 2017. Potential exposure of PHI, SSN, DOB, driver's license, and insurance info. No ransom paid; files restored from backups. No evidence of data exfiltration. Identity theft protection offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 578 days

discovery → filing · ≤1 day / 0 days

Feb 1, 2016

Begins

Sep 1, 2017

Discovered

Jul 6, 2017

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_adc3a8719052b2732017-07-06Verified
HHS OCRbd_803b99d6eaeb18712017-07-07 · +1dVerified
South Carolina State AGbd_479ac02af2456f7d2017-07-10 · +4dVerified
Massachusetts State AGbd_dad68f7876cb8f572017-07-10 · +4dVerified

Name: Peachtree Neurological Clinic, P.C.
norm: peachtree neurological clinic

Name: Peachtree Neurological Clinic, P.C.
norm: peachtree neurological clinic
Industry: Healthcarellm

Discovered: Sep 1, 2017
Breach occurred: Feb 1, 2016 – May 1, 2017
Undetected for: 578 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 1, 2017
Affected individuals: 13state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Medical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to law enforcement

During the incident: Reported the incident to law enforcement and is cooperating with its investigation
Secured our EMR system
Implemented additional security measures
Offering identity theft protection services through ID Experts
Changes made: Secured our EMR system
Implemented additional security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGJul 6 · first

Montana State AGJul 6 · first · this page

HHS OCR+1d

South Carolina State AG+4d

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Peachtree-Neurological-Clinic.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2017
Raw hash: 0bfa085491ad2b53c63fb802d6b1446cd79b5f50ea9e8e9966fd490dd66c03d9

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityPeachtree Neurological Clinic, P.C.

Victim entityPeachtree Neurological Clinic, P.C.

Incidentdiscovered Sep 1, 2017

Stated responseReported the incident to law enforcement and is cooperating with its investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov