HCA Healthcare Inc.
bd_35790d97fa0a2859 · schema v1 · pii pii-v1
Full breach record for HCA Healthcare Inc. →4 incidents on fileHCA Healthcare disclosed that in late June 2023, an unauthorized party accessed an external storage location used for email formatting automation. The incident, discovered on July 5, 2023, exposed patient PII including names, contact info, and DOB. No clinical or financial data was compromised. HCA disabled access, notified law enforcement, and engaged forensic advisors. Credit monitoring was offered.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 1, 2023
Begins
Jul 5, 2023
Discovered
Jul 14, 2023
Filed
vs. sector median
11 wks faster
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- SEC 8-Kbd_2da8bd258eae08062023-07-10 · +4dCandidate
- HHS OCRbd_71092e6fb24830ae2023-07-31 · +17dVerified
- California State AGbd_64b2526179555bbb2023-08-01 · +18dVerified
- Washington State AGbd_9b908244a6dec3212023-08-01 · +18dVerified
Show 6 more filings ↓Show fewer ↑up to 48d gap
- New Hampshire State AGbd_a60290f5c43261202023-08-28 · +45dVerified
- Idaho State AGbd_ba5937f7f4bf868d2023-08-28 · +45dVerified
- Montana State AGbd_e1ece1715cd497062023-08-29 · +46dVerified
- Massachusetts State AGbd_ff2e8ab93fef2eeb2023-08-29 · +46dVerified
- Oregon State AGbd_469b4c05c3cce8b62023-08-30 · +47dVerified
- South Carolina State AGbd_9d3b8351bb1555992023-08-31 · +48dVerified
Filing propagation · 11 filings · 10 states
View merged incident ↗Pattern: first filing Jul 10, last Aug 31 (SC) — a 52-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.