AccidentalHealthcareTechnologyHealthcareMisconfigurationCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentHighContained

Ortho Clinic Diagnostics, Inc.

bd_35a92a7b8c23a988 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Nov 29, 2007

To disclose

—

Affected · nationwide

4,2853 in this filing

Linked

2 filings

Confidence

68%

Full breach record for Ortho Clinic Diagnostics, Inc. →

Ortho-Clinical Diagnostics, Inc. notified the NH AG of a security incident where an electronic folder containing employee PII (SSNs, addresses, employment data) was inadvertently accessible for ~6 months. ~4,285 employees affected. No evidence of misuse. Notifications sent Nov 30, 2007. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Nov 29, 2007

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_3de67fc663f749a82007-12-04 · +5dVerified

Name: Ortho Clinic Diagnostics, Inc.
norm: ortho clinic diagnostics

Name: Ortho Clinic Diagnostics, Inc.
norm: ortho clinic diagnostics
Industry: HealthcarellmTechnologyllm

Discovered: —
Materiality determined: —
Notification sent: Nov 30, 2007
Affected individuals: 4,285state + nationwide
Data types: Government IDIdentity (basic)Employment
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1078 Valid Accounts
Regulator citations: Notified New Hampshire Attorney General

During the incident: Began investigating the incident
Taking steps to protect the personal data of its employees
Advising potentially affected current and former employees to be vigilant in monitoring their personal accounts and credit information
Encouraging them to enroll in a free year of credit protection services
Plans to send the attached notification letter to potentially affected individuals
Retained ConsumerInfo.com, Inc. to provide you with a free year of credit monitoring
Set up dedicated phone lines in the event you have any questions regarding this incident
Changes made: Restored security on the electronic folder
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGNov 29 · first · this page

Massachusetts State AG+5d

Pattern: first filing Nov 29 (NH), last Dec 4 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ortho-clinic-20071129.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 29, 2007
Raw hash: 31a3e231f6578f2488ff096fabbc7caaaff9978064b1d077eb95bd4059f6b028

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityOrtho Clinic Diagnostics, Inc.

Victim entityOrtho Clinic Diagnostics, Inc.

IncidentMisconfiguration

Stated responseBegan investigating the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov