CHSPSC, LLC
bd_0d9ab92e55f3d8a0 · schema v1 · pii pii-v1
Full breach record for CHSPSC, LLC →7 incidents on fileCHSPSC, LLC disclosed a third-party security incident involving vendor Fortra, LLC. An unauthorized party exploited a previously unknown vulnerability in Fortra's GoAnywhere file transfer platform between January 28-30, 2023. The incident resulted in the unauthorized disclosure of personal information for CHSPSC affiliates, including patients and employees. Affected data included names, addresses, medical billing/insurance info, diagnoses, medications, dates of birth, and Social Security numbers. Fortra contained the incident on January 31, 2023. CHSPSC notified law enforcement (FBI, CISA) and is offering 24 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 28, 2023
Begins
Jan 30, 2023
Discovered
Mar 7, 2023
Filed
vs. sector median
7 wks faster
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Oregon State AGbd_2b73da2633a307ff2023-03-07Verified
- Washington State AGbd_ee40a8445255d0632023-03-07Verified
- Montana State AGbd_8d82685405a418fc2023-03-08 · +1dVerified
- Maine State AGbd_e8298cc5c3b2011e2023-03-08 · +1dVerified
Show 3 more filings ↓Show fewer ↑up to 41d gap
- Oregon State AGbd_05ff925166a4537f2023-04-17 · +41dVerified
- California State AGbd_bf411ffed68cd2ce2023-04-17 · +41dVerified
- Maine State AGbd_fefafc85063dc9bb2023-04-17 · +41dVerified
Filing propagation · 8 filings · 5 states
View merged incident ↗Pattern: first filing Mar 7 (OR), last Apr 17 (ME) — a 41-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.