DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedBusiness Associate (HIPAA)PHIIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Synergy Healthcare Services

bd_4924a611ea1ef2aa · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 1, 2022

Filed

Jul 27, 2023

To disclose

34 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

66%
Full breach record for Synergy Healthcare Services →

Synergy Healthcare Services notified consumers of a security incident where an unauthorized third party accessed files containing protected health information (PHI) and personally identifiable information (PII), including names, SSNs, and bank account numbers. Suspicious activity was detected in early December 2022, with unauthorized access confirmed on December 15, 2022. The company engaged third-party experts, secured systems, and offered one year of complimentary credit monitoring via Experian. Synergy acts as a business associate for Consulate Health Care, Raydiant Health Care, and Independence Living Centers.

Vermont clock✗ VT AG >45 bday34 weeks discovery → filing

Incident timeline

discovery → filing · 34 weeks / 238 days

Dec 1, 2022

Begins

Dec 1, 2022

Discovered

Jul 27, 2023

Filed

vs. sector median

+25 wks slower

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 14d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Montana State AGJul 26 · first
Vermont State AG+1d · this page

Pattern: first filing Jul 26 (MT), last Aug 10 (MA) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.