Health Management Concepts, Inc.
ent_ebfdcff24dac3d403df2c81b
Disclosures
7
State AG · HHS OCR · 5 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
502,416
nationwide · HHS OCR FL
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Health Management Concepts, Inc.
- Normalized
- health management concepts— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (7)newest first
- Oregon State AGas victim2018-08-22
Health Management Concepts, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2018-08-22. The breach occurred during 7/19/2018 - 7/19/2018. The breach was discovered on 7/19/2018. 2,583 individuals were affected. Notice was sent on 8/22/2018.
- Montana State AGas victim2018-08-22
Health Management Concepts, Inc. (HMC) notified 2,587 individuals of a ransomware incident affecting a file-sharing server. Discovered July 16, 2018, the attack exposed names, SSNs, and health insurance info. HMC engaged forensic investigators, decrypted files, and offered one year of Experian IdentityWorks credit monitoring.
- FLORIDAHHS OCRas reporting2018-08-22
Health Management Concepts, Inc. reported to HHS on 2018-08-22 a Hacking/IT Incident affecting 502416 individuals. Breached information located on Network Server. Ransomware encrypted data on a secure sFTP server. ePHI for Inlandboatmen’s Union of the Pacific National Benefit Fund was disclosed to the attacker during decryption negotiations.
- New Hampshire State AGas victim2018-08-20
Health Management Concepts, Inc. (HMC) notified the NH AG of a ransomware incident discovered July 16, 2018. Attackers encrypted a file-sharing server and inadvertently received a file containing names, SSNs, and health insurance info for 2,587 individuals (4 NH residents). HMC decrypted files, engaged forensic investigators, and offered 1 year of credit monitoring. Remediation included removing RDP access and migrating servers.
- Massachusetts State AGas victim2018-06-11
Health Management Concepts, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-06-11. 17 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas victim2018-06-11
Health Management Concepts, Inc. notified the NH AG of a ransomware incident affecting 4 NH residents. Discovered Jan 25, 2018, notification sent June 11, 2018. Encrypted files contained names and SSNs. No evidence of actual access. Remediation included forensic investigation, MFA implementation, and staff training.
- Massachusetts State AGas victim2016-08-22
Health Management Concepts, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-08-22. 6 Massachusetts residents were affected. The report records the breach type as electronic.