Perry Johnson & Associates
bd_1adfde128d860768 · schema v1 · pii pii-v1
Full breach record for Perry Johnson & Associates →Perry Johnson & Associates, Inc. (PJ&A), a healthcare transcription service provider and HIPAA business associate, experienced unauthorized access to personal health information (PHI) between April 7 and April 19, 2023. The incident was discovered on May 2, 2023. Affected data included names, dates of birth, addresses, medical record numbers, diagnoses, and potentially Social Security numbers and clinical information. PJ&A engaged external cybersecurity vendors, notified law enforcement and HHS, and implemented technical restrictions and password resets. No evidence of identity theft or fraud was identified at the time of notification.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 7, 2023
Begins
May 2, 2023
Discovered
Nov 3, 2023
Filed
vs. sector median
+14 wks slower
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- Massachusetts State AGbd_55ddc5b1225b74b22023-11-03Verified
- HHS OCRbd_8c6f3a0fd64dbc2b2023-11-03Verified
- Montana State AGbd_9f4ab98e9b3f400c2023-11-03Verified
- Oregon State AGbd_cce245527b8f6f2d2023-11-03Verified
Show 4 more filings ↓Show fewer ↑up to 98d gap
- South Carolina State AGbd_802bf87a5041d6aa2023-11-06 · +3dVerified
- Maine State AGbd_37c0bc2703c85d052024-02-08 · +97dVerified
- New Hampshire State AGbd_9576341e5a70d9742024-02-08 · +97dVerified
- Massachusetts State AGbd_0359f107f8739c972024-02-09 · +98dVerified
Filing propagation · 9 filings · 8 states
View merged incident ↗Pattern: first filing Nov 3 (MA), last Feb 9 (MA) — a 98-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.