HackingHealthcareTechnologyHealthcareStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryFinancial accountIdentity (basic)Government IDPHIHealth (basic)MediumContained

Veradigm LLC

bd_08296464db33b3c8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 1, 2025

Filed

Dec 2, 2025

To disclose

22 weeks

Affected

845state residents only

Linked

5 filings

Confidence

70%

Full breach record for Veradigm LLC →2 incidents on file

Veradigm LLC reported an unauthorized access incident affecting customer data. The breach occurred between Dec 15-16, 2024, and was discovered on July 1, 2025. 845 Washington residents were affected. Data included names, SSNs, and financial account numbers. Veradigm engaged forensic experts, implemented technical safeguards, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d22 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 198 days

discovery → filing · 22 weeks / 154 days

Dec 15, 2024

Begins

Jul 1, 2025

Discovered

Dec 2, 2025

Filed

vs. sector median

+13 wks slower

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Oregon State AGbd_b6a337a4d0c590432025-12-02Verified
California State AGbd_0912117a072a78742025-12-18 · +16dVerified
Texas State AGbd_b7d35c91fc95e1302025-12-19 · +17dVerified
Illinois State AGbd_04abbf54f50eb9542025-11-01 · +31dVerified

Name: Veradigm LLC
norm: veradigm

Name: Veradigm LLC
norm: veradigm
Industry: HealthcarellmTechnologyllm

Discovered: Jul 1, 2025
Breach occurred: Dec 15, 2024 – Dec 16, 2024
Undetected for: 198 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 845state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthHealth insurance IDMedical information
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 100-199dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Brought in cybersecurity experts to conduct a thorough review of the impacted storage account
Allocated significant resources to help ensure that the solutions Veradigm provides to its customers are secure
Implemented new technical safeguards and other measures to further reduce the likelihood of a similar event in the future
Offering access to complimentary credit monitoring and identity protection services through Experian IdentityWorks
Changes made: Implemented new technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(154 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGNov 1 · first

Oregon State AG+31d

Washington State AG+31d · this page

California State AG+47d

Texas State AG+48d

Pattern: first filing Nov 1 (IL), last Dec 19 (TX) — a 48-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA35732.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 2, 2025
Raw hash: 8b59ec17da6af75656e0673b16ccef9e59d5bce03478829c48104c19ad260dfc

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityVeradigm LLC

Victim entityVeradigm LLC

Incidentdiscovered Jul 1, 2025

Stated responseBrought in cybersecurity experts to conduct a thorough review of the impacted storage account

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com