DisclosureLens
KENTUCKYMalwareHealthcareHealthcareRansomwareCapture Stored DataCustomer Data InvolvedData EncryptedData ExfiltratedRansom DemandedHealth (basic)Identity (basic)Government IDFinancial accountPHICriticalContained

NORTON HEALTHCARE, INC.

bd_24b4a063f740cc5a · schema v1 · pii pii-v1

Severity

Critical

Discovered

—

Filed

Jul 7, 2023

To disclose

—

Affected

2,500,000

Linked

12 records

Confidence

96%
Full breach record for NORTON HEALTHCARE, INC. →

Norton Healthcare Inc. (KY) reported to HHS OCR on 2023-07-07 a ransomware incident affecting 2,500,000 individuals. Breached information was located on network servers and included names, addresses, dates of birth, Social Security numbers, and financial and health insurance information. The organization notified HHS, affected individuals, the media, and posted substitute notice on its website. Free credit monitoring was offered and additional administrative, technical, and security safeguards were implemented.

HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline — partial

? — ?

Breach window unknown

Jul 7, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 12 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Show 5 more filings ↓up to 159d gap

Showing first 10 of 11 linked disclosures.

Filing propagation · 10 filings · 10 states

View merged incident ↗
HHS OCRJul 7 · first · this page
Maine State AG+154d
Montana State AG+154d
California State AG+154d
Washington State AG+154d
South Carolina State AG+154d
Massachusetts State AG+154d
Vermont State AG+154d
New Hampshire State AG+157d
Oregon State AG+159d

Pattern: first filing Jul 7 (KY), last Dec 13 (OR) — a 159-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.