ATHENAHEALTH, INC.
bd_4578d2cfe6b20643 · schema v1 · pii pii-v1
Full breach record for ATHENAHEALTH, INC. →athenahealth, Inc. notified Montana residents of a data breach where Eligibility Transaction Files (containing names, addresses, DOB, gender, and clinical/payment info) were inadvertently uploaded to a publicly accessible internet repository due to a manual configuration error. The incident was discovered on September 16, 2024, after an insurance provider alerted athenahealth. No SSN or financial account numbers were involved. athenahealth removed the files, investigated, and offered 12 months of identity protection services.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 3, 2024
Begins
Sep 16, 2024
Discovered
Nov 15, 2024
Filed
vs. sector median
10 wks faster
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- HHS OCRbd_835a237069fb82112024-11-15Verified
- New Hampshire State AGbd_8ba652ba3e10c74b2024-11-15Verified
- Indiana State AGbd_dda00b7398f09ba52024-11-15Verified
- Idaho State AGbd_e9e06934e266ff552024-11-15Verified
Show 2 more filings ↓Show fewer ↑up to 14d gap
- Massachusetts State AGbd_0ce80a8b77ec1d4a2024-11-16 · +1dVerified
- Illinois State AGbd_47ff2c4a38b2128f2024-11-01 · +14dVerified
Filing propagation · 7 filings · 6 states
View merged incident ↗Pattern: first filing Nov 1 (IL), last Nov 16 (MA) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.