DisclosureLens
HackingHealthcareHealthcareCapture Stored DataData ExfiltratedCustomer Data InvolvedHealth (basic)Identity (basic)Government IDPHIPIIMediumContained

Anatomic Clinical Laboratory Associates

bd_44af52239b6ffd31 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 1, 2025

Filed

Jun 23, 2026

To disclose

29 weeks

Affected

69state residents only

Linked

5 filings

Confidence

67%
Full breach record for Anatomic Clinical Laboratory Associates

Anatomic and Clinical Laboratory Associates, P.C. (ACLA), a pathology group in Tennessee, notified individuals of a data security incident beginning December 1, 2025. An unknown actor accessed the network and downloaded files containing names and protected health information. ACLA engaged external cybersecurity experts, secured the network, and offered complimentary credit monitoring and identity theft protection via Epiq. The investigation concluded on April 27, 2026.

Massachusetts clock MA AG >90d29 weeks discovery → filing

Incident timeline

discovery → filing · 29 weeks / 204 days

Dec 1, 2025

Discovered

Jun 23, 2026

Filed

vs. sector median

+17 wks slower

This filing is one of 5 about the same incident.View merged incident
A leak claim by insomnia about this victim predates this filing by 210 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Nebraska State AGJun 23 · first
HHS OCRJun 23 · first
New Hampshire State AGJun 23 · first
Massachusetts State AGJun 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.