DisclosureLens
HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedDelayed DiscoveryPIIIdentity (basic)CredentialsLowContained

American Osteopathic Association

bd_3491bc86d3157d16 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 25, 2020

Filed

Oct 13, 2021

To disclose

16 months

Affected

17state residents only

Linked

9 filings

Confidence

66%
Full breach record for American Osteopathic Association

American Osteopathic Association notified individuals of a data breach discovered on June 25, 2020, where an unauthorized actor exfiltrated personal information. The organization engaged forensic investigators, secured accounts, and provided 12 months of Kroll identity monitoring. Notification was sent on June 1, 2021, citing pandemic-related delays in identifying affected individuals.

Incident timeline

discovery → filing · 16 months / 475 days

Jun 25, 2020

Discovered

Oct 13, 2021

Filed

vs. sector median

+50 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filingsup to 285d gap

Filing propagation · 9 filings · 9 states

View merged incident ↗

Pattern: first filing Jan 1 (IL), last Oct 19 (NH) — a 291-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.