AspenPointe Properties data breach (2020)

Breach window

Sep 12, 2020

When the intrusion reportedly occurred, per the linked filings

68 days

COHHS OCRFirst filing

Filed Nov 19, 2020bd_e50d29e14762cd89

AspenPointe, Inc. (Colorado) reported to HHS OCR on 2020-11-19 a ransomware attack affecting 295,617 individuals. Breached information was located on a Network Server and included names, dates of birth, Social Security numbers, and claims and financial information. The CE notified HHS, affected individuals, and the media, and implemented additional technical and administrative safeguards. OCR provided technical assistance regarding HIPAA Privacy and Breach Notification Rule obligations.

Affected (this filing): 295,617

HHS notified

🦬Montana State AGMost recentlinked via same-victim cross-source · 100%

Filed Nov 19, 2020bd_eca0abbdd7293048

AspenPointe reported a data breach to the Montana Attorney General. The breach was reported on 2020-11-19. The breach occurred from 9/12/2020 to 9/22/2020. 38 Montana residents were affected.

Affected (this filing): 38

AspenPointe Properties

Litigation Timing

Sensitive data

Timeline