The Southeastern Council on Alcoholism and Drug Dependence data breach (2019)

Breach window

Feb 18, 2019

When the intrusion reportedly occurred, per the linked filings

72 days

CTHHS OCRFirst filing

Filed May 1, 2019bd_b36da704e67c466f

The Southeastern Council on Alcoholism and Drug Dependence (CT, healthcare provider) reported a ransomware attack affecting ePHI of 25,148 individuals. Compromised data included names, addresses, dates of birth, Social Security numbers, and health insurance and treatment information. The CE notified HHS, affected individuals, and the media; offered credit monitoring and identity restoration; and implemented additional administrative and technical safeguards. OCR obtained assurances of corrective actions.

Affected (this filing): 25,148

HHS notified

🦬Montana State AGMost recentlinked via same-victim cross-source · 100%

Filed May 10, 2019bd_1fc47e70b05b85f3

The Southeastern Council and Alcoholism on Drug Inc (SCADD) reported a data breach to the Montana Attorney General. The breach was reported on 2019-05-10. The breach occurred from 2/18/2019 to 4/2/2019. 2 Montana residents were affected.

Affected (this filing): 2

The Southeastern Council on Alcoholism and Drug Dependence

Litigation Timing

Sensitive data

Timeline