UnknownHealthcareLow

KRYSTAL BIOTECH, INC.

bd_13c5f57922a86cc2 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jan 30, 2024

To disclose

—

Affected · nationwide

5984 in this filing

Linked

3 filings

Confidence

95%

Full breach record for KRYSTAL BIOTECH, INC. →

Krystal BioTech, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-11-16 and was reported on 2024-01-30. 4 Indiana residents were affected. 598 individuals affected in total.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 16, 2023

Begins

Jan 30, 2024

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_3c9479cb266f37c82024-02-05 · +6dVerified
Massachusetts State AGbd_270722eb61d954fc2024-02-06 · +7dVerified

Name: The Krystal Company
norm: the krystal
Domain: krystal.com

Name: KRYSTAL BIOTECH, INC.
norm: krystal biotech
Domain: krystalbiotech.applytojob.com

Discovered: —
Breach occurred: Nov 16, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 598state + nationwide
Data types: —
Attack vector: Unknown

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJan 30 · first · this page

New Hampshire State AG+6d

Massachusetts State AG+7d

Pattern: first filing Jan 30 (IN), last Feb 6 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/security-breaches/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 30, 2024
Raw hash: 6065ebbcc8f01a12e9ee0b22694a9f697db766d939848f1fa23f5ef774bd22b6

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityThe Krystal Company

Victim entityKRYSTAL BIOTECH, INC.

IncidentUnknown

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.in.gov