MalwareRansomwareData EncryptedCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
MSK Group
bd_ffa55054fea20f33 · schema v1 · pii pii-v1
Full breach record for MSK Group →MSK Group, P.C., an orthopedic healthcare provider, discovered a security event on May 7, 2018, involving unauthorized access to its computer networks and data encryption. Potentially affected data includes PHI, names, addresses, dates of birth, medical record numbers, SSNs, and driver's license numbers. The organization hired consultants, reported the incident to the FBI, and offered one year of identity theft protection to affected individuals.
California clockDiscovered May 7, 2018 → Notified Jul 5, 201859d ✓ CA 60-day OK8 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-137702
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 5, 2018
- Raw hash
- 3c55166e2a0f1341535a214ad6dccb5df08bfa48d1cd02be7ca9b49896495180
Reporting entity
- Name
- MSK Groupnorm: msk group
- Domain
- mskgroup.com
Victim entity
- Name
- MSK Groupnorm: msk group
- Domain
- mskgroup.com
Incident
- Discovered
- May 7, 2018
- Materiality determined
- —
- Notification sent
- Jul 5, 2018
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- External
- Regulator citations
- Reported this to the FBI
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 59d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 7, 2018→ Notified: Jul 5, 201859d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.