HackingHealthcareFinancial ServicesHealthcareCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowContained

MedImpact Healthcare

bd_14e2f6ba42db654b · schema v1 · pii pii-v2

Severity

Low

Discovered

Oct 18, 2025

Filed

Sep 25, 2026

To disclose

49 weeks

Affected

Not disclosed

Linked

6 records

Confidence

68%

Full breach record for MedImpact Healthcare →

MedImpact Healthcare Systems, Inc., a pharmacy benefits manager, identified unauthorized activity in its systems on October 18, 2025. The company secured affected systems and engaged cybersecurity experts. Certain data relating to individuals was potentially impacted. MedImpact enhanced security safeguards and offered identity monitoring services through Kroll.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d49 weeks discovery → filing

Incident timeline

discovery → filing · 49 weeks / 342 days

Oct 18, 2025

Begins

Oct 18, 2025

Discovered

Sep 25, 2026

Filed

vs. sector median

+40 wks slower

This filing is one of 6 records about the same incident.View merged incident

A leak claim by qilin about this victim was first seen 333 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteqilinbd_b1db918e771e4fe92025-10-12 · +348dVerified

Regulatory filings (4) · sorted by filing gap

Oregon State AGbd_3392b05e9b0f70902026-09-26 · +1dVerified
Texas State AGbd_051c407f829eb5812026-09-29 · +4dVerified
California State AGbd_935b807df52a877a2026-09-15 · +10dVerified
Massachusetts State AGbd_d1d5a4ce84c29d9b2026-09-01 · +24dCandidate

Name: MedImpact Healthcare
norm: medimpact healthcare
Domain: medimpact.com

Name: MedImpact Healthcare
norm: medimpact healthcare
Domain: medimpact.com
Industry: HealthcarellmFinancial Servicesllm

Discovered: Oct 18, 2025
Breach occurred: Oct 18, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Unknown
Threat actor: External

During the incident: Took steps to secure the affected systems
Engaged cybersecurity experts to assist in the investigation and response
Conducted a detailed review of data potentially impacted by the incident
Enhanced its security safeguards and monitoring
Secured the services of Kroll to provide identity monitoring at no cost
Changes made: Enhanced its security safeguards and monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 49 weeks(342 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Massachusetts State AGSep 1 · first

California State AG+14d

California State AG+24d · this page

Oregon State AG+25d

Texas State AG+28d

Pattern: first filing Sep 1 (MA), last Sep 29 (TX) — a 28-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-630343
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 25, 2026
Raw hash: 32cbc8b0ee51515c922d299cd141a3d5bce2264ceb118c38c482744cbd59d707

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityMedImpact Healthcare

Victim entityMedImpact Healthcare

Incidentdiscovered Oct 18, 2025

Stated responseTook steps to secure the affected systems

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov