HackingTechnologyHealthcareHealthcareCustomer Data InvolvedPIILowContained

Veradigm LLC

bd_0912117a072a7874 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 18, 2025

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

68%

Full breach record for Veradigm LLC →2 incidents on file

Veradigm LLC reported a data security breach to the California AG involving unauthorized access to a storage account, with a breach date of December 15, 2024. The notice, dated September 22, 2025, indicates that personal data of affected individuals was potentially exposed. Veradigm engaged cybersecurity experts, implemented new technical safeguards, and offered 12–24 months of complimentary Experian IdentityWorks credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 15, 2024

Begins

Dec 18, 2025

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Texas State AGbd_b7d35c91fc95e1302025-12-19 · +1dVerified
Washington State AGbd_08296464db33b3c82025-12-02 · +16dCandidate
Oregon State AGbd_b6a337a4d0c590432025-12-02 · +16dVerified
Illinois State AGbd_04abbf54f50eb9542025-11-01 · +47dVerified

Name: Veradigm LLC
norm: veradigm

Name: Veradigm LLC
norm: veradigm
Industry: TechnologyllmHealthcarellm

Discovered: —
Breach occurred: Dec 15, 2024
Materiality determined: —
Notification sent: Sep 22, 2025
Affected individuals: Not disclosed
Data types: PII
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Notified California Attorney General (SB-24 breach notification filed)

During the incident: Brought in cybersecurity experts to conduct a thorough review of the impacted storage account
Allocated significant resources to help ensure that the solutions Veradigm provides to its customers are secure
Offering [12 or 24 (as applicable)] months of complimentary credit monitoring and identity protection services through Experian IdentityWorksSM
Changes made: Implemented new technical safeguards and other measures to further reduce the likelihood of a similar event in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGNov 1 · first

Washington State AG+31d

Oregon State AG+31d

California State AG+47d · this page

Texas State AG+48d

Pattern: first filing Nov 1 (IL), last Dec 19 (TX) — a 48-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-615974
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 18, 2025
Raw hash: de8fdfde28f7f800ad5ac847ff01ece65405cb68ce88c260082a1160458a7d50

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityVeradigm LLC

Victim entityVeradigm LLC

IncidentUnauthorized Access

Stated responseBrought in cybersecurity experts to conduct a thorough review of the impacted storage account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov