Orchard Medical Consulting
bd_1b27f272c568e797 · schema v1 · pii pii-v1
Full breach record for Orchard Medical Consulting →Orchard Medical Consulting disclosed that an unauthorized individual gained access to a single employee's email account on January 16, 2020, which was discovered on January 30, 2020. The incident potentially exposed personal information, including names, dates of birth, Social Security numbers, and limited medical information (PHI) such as diagnoses and treatment plans. The company contained the incident, reported it to regulators, and offered one year of credit monitoring to affected individuals. Remediation steps included implementing multi-factor authentication and forcing password changes.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 16, 2020
Begins
Jan 30, 2020
Discovered
May 28, 2020
Filed
vs. sector median
+4 wks slower
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- Montana State AGbd_51b86a0c0572de642020-05-05 · +23dCandidate
- California State AGbd_87bc5e0a982a7c952020-05-05 · +23dCandidate
- Indiana State AGbd_6b94c7e1c97ba0d92020-07-01 · +34dVerified
Filing propagation · 4 filings · 3 states
View merged incident ↗Pattern: first filing May 5 (MT), last Jul 1 (IN) — a 57-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.