HackingStolen CredentialsData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumContained
Cardiovascular Associates Holdings, LP
bd_489906bb2eebc73f · schema v1 · pii pii-v1
Full breach record for Cardiovascular Associates Holdings, LP →Cardiovascular Associates notified patients of a data breach where unauthorized access occurred between Nov 28 and Dec 5, 2022. Personal information including names, SSNs, medical records, and financial data was accessed. A forensic firm was engaged, and affected individuals were offered credit monitoring.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_3101fb359642d7d3California State AGfiled 2023-02-03Candidate
- bd_bfd43f9919ac6f72Montana State AGfiled 2023-02-03Verified
- bd_cd85f8eca6803424New Hampshire State AGfiled 2023-02-06(3d gap)Verified
- bd_1e18382a04b09a26California State AGfiled 2023-03-17(42d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 42d gap
- bd_c613160ae6c07cfdMaine State AGfiled 2023-03-17(42d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-02-03-cardiovascular-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2023
- Raw hash
- 17941d5c5cf6d8d1662df5331b4fe1262d4356b1fa6351248019e3217d63aae8
Reporting entity
- Name
- Cardiovascular Associates Holdings, LPnorm: cardiovascular associates
Victim entity
- Name
- Cardiovascular Associates Holdings, LPnorm: cardiovascular associates
Incident
- Discovered
- Dec 5, 2022
- Materiality determined
- Feb 3, 2023
- Notification sent
- Feb 3, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.