HackingHealthcareHealthcareCapture Stored DataData ExfiltratedTargetedIdentity (basic)Government IDHighContained

OneBlood, Inc.

bd_26194deb18bd7645 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 28, 2024

Filed

Jan 9, 2025

To disclose

24 weeks

Affected

1,530state residents only

Linked

6 filings

Confidence

62%

Full breach record for OneBlood, Inc. →3 incidents on file

OneBlood, Inc. notified South Carolina regulators of a data breach occurring between July 14-29, 2024. Unauthorized access resulted in the copying of files containing names and Social Security numbers. OneBlood detected suspicious activity on July 28, 2024, and notified federal law enforcement. The company is offering 12 months of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due24 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 14 days

discovery → filing · 24 weeks / 165 days

Jul 14, 2024

Begins

Jul 28, 2024

Discovered

Jan 9, 2025

Filed

vs. sector median

+11 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Oregon State AGbd_177bc67008aedc062025-01-09Candidate
Massachusetts State AGbd_21809a99aff28c142025-01-09Verified
Indiana State AGbd_6e9d8e191ff20a4d2025-01-09Verified
Maine State AGbd_a2871e1428a6a4802025-01-09Verified by operator

Show 1 more filing ↓up to 308d gap

Maryland State AGbd_4d599b95055a1ac12025-11-13 · +308dVerified

Name: OneBlood, Inc.
norm: oneblood
Domain: oneblood.org

Name: OneBlood, Inc.
norm: oneblood
Domain: oneblood.org
Industry: Healthcarellm

Discovered: Jul 28, 2024
Breach occurred: Jul 14, 2024 – Jul 29, 2024
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 9, 2025
Affected individuals: 1,530state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 ChannelT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement

During the incident: Promptly took steps to secure our systems
Conducted a detailed investigation to confirm the full nature and scope of the event
Notified federal law enforcement of this event
Offering you complimentary access to twelve (12) months of credit monitoring and identity theft restoration services, through TransUnion
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(165 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Oregon State AGJan 9 · first

Massachusetts State AGJan 9 · first

Indiana State AGJan 9 · first

Maine State AGJan 9 · first

South Carolina State AGJan 9 · first · this page

Maryland State AG+308d

Pattern: first filing Jan 9 (OR), last Nov 13 (MD) — a 308-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2025/OneBloodInc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 9, 2025
Raw hash: 4da014369b3e9ac307e5e1d99145bb5b44c724de3c52153d7df7989a001a4e8f

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityOneBlood, Inc.

Victim entityOneBlood, Inc.

Incidentdiscovered Jul 28, 2024

Stated responsePromptly took steps to secure our systems

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov