Ascend Clinical, LLC data breach (2020)

FEDERALHHS OCRFirst filing

Filed Oct 19, 2020bd_fc6b4a302719f9a0

Ascend Clinical, LLC (a California healthcare provider) reported to HHS OCR on 2020-10-19 that an email phishing attack compromising numerous employee mailboxes exposed the ePHI of 77,443 individuals. Exposed data included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, and prescribed medications. The entity notified HHS, affected individuals, and the media; offered free credit monitoring, identity theft, and fraud protection services; and implemented additional administrative, technical, and security safeguards along with staff retraining.

Affected (this filing): 77,443

🐻California State AG

Filed Oct 26, 2020bd_43c5891ca65999ef

Ascend Clinical LLC, a clinical reference laboratory specializing in kidney disease testing, experienced a ransomware incident. On May 31, 2020, Ascend detected encrypted data and unauthorized access. An attacker accessed and downloaded business records containing PHI, including names, addresses, medical diagnoses, and SSNs. Ascend engaged forensic consultants, restored systems, and offered one year of identity monitoring via Kroll.

🌲Washington State AGlinked via same-victim cross-source · 100%

Filed Oct 27, 2020bd_80d721f819ea5e74

Ascend Clinical, LLC, a health sector entity reported a phishing incident to the Washington Attorney General. The organization became aware of the incident on 2020-05-31 and filed notice on 2020-10-27. 1,959 Washington residents were affected. 149 days elapsed between awareness and notification.

Affected (this filing): 1,959

WA AG >90d

🦫Oregon State AGlinked via same-victim cross-source · 100%

Filed Oct 27, 2020bd_affdc1609c7f455a

Ascend Clinical LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2020-10-27. The breach occurred during 4/21/2020 - 6/15/2020. The breach was discovered on 5/31/20209/23/2020. 77,443 individuals were affected. Notice was sent on 10/27/2020.

Affected (this filing): 77,443

OR AG >45d

Ascend Clinical, LLC

Litigation Timing

Sensitive data

Affected residents by state

Timeline