DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Health (basic)Financial accountPIILowContained

CAPSULE GROUP, LLC

bd_187331c9d5401226 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 5, 2022

Filed

May 27, 2022

To disclose

7 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

64%
Full breach record for CAPSULE GROUP, LLC2 incidents on file

On April 5, 2022, Capsule discovered that unauthorized threat actors gained access to certain customer accounts. The incident involved demographic information (name, email, phone, address, DOB, sex), health information (medical conditions, prescribed medications), past order history, limited payment information (last 4 digits of card, expiration date), insurance information (group ID, cardholder ID), and chat messages. Capsule engaged a third-party forensic firm, reset passwords, implemented additional security safeguards, and offered 12 months of complimentary Experian IdentityWorks identity protection services.

California clockDiscovered Apr 5, 2022Notified May 27, 202252d CA 60-day OK7 weeks discovery → filing

Incident timeline

discovery → filing · 7 weeks / 52 days

Apr 5, 2022

Begins

Apr 5, 2022

Discovered

May 27, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
HHS OCRMay 27 · first
California State AGMay 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.