HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

Anatomic

bd_1911265be2939f71 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 1, 2025

Filed

Jun 23, 2026

To disclose

—

Affected

24state residents only

Confidence

67%

Full breach record for Anatomic →

Anatomic and Clinical Laboratory Associates, P.C. (ACLA) notified the Nebraska Attorney General on June 23, 2026, of a data incident affecting 24 Nebraska residents. ACLA discovered unauthorized network activity on December 1, 2025, where an unknown actor downloaded files containing personal and protected health information (SSN, DOB, medical records). ACLA secured its network, engaged external experts, notified credit bureaus, and offered 12 months of credit monitoring via Epiq.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 1, 2025

Discovered

Jun 23, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed24 affectedView incident

Name: Anatomic
norm: anatomic
Domain: anatomic.com

Name: Anatomic
norm: anatomic
Domain: anatomic.com
Industry: Healthcarellm

Discovered: Dec 1, 2025
Materiality determined: —
Notification sent: Jun 23, 2026
Affected individuals: 24state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Nebraska Attorney General's Office
Initial access: valid_credentials

During the incident: Conducted a prompt and comprehensive investigation to confirm the scope of the event, secure its network, and to identify and notify potentially impacted individuals
Established a toll-free call center to answer questions about the event and to address related concerns
Providing written notice of this incident to relevant regulators, law enforcement and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Offering you the opportunity to enroll in complimentary credit monitoring and identity theft protection services through Epiq
Changes made: Implemented additional security features to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/7cc3e2c8-b7e2-4d4f-88aa-c8d2f8805561.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 23, 2026
Raw hash: 673f28add5e13081a14fe693ea0f8df99a2b3189d75efcce51e82efa16d52901

Reporting entityAnatomic

Victim entityAnatomic

Incidentdiscovered Dec 1, 2025

Stated responseConducted a prompt and comprehensive investigation to confirm the scope of the event, secure its network, and to identify and notify potentially impacted individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov