DisclosureLens
HackingHealthcareHealthcareStolen CredentialsTargetedFinancial accountIdentity (basic)Government IDPHIHealth (basic)HighContained

Advarra Holdings, Inc.

bd_4934335b0ebda8b7 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 26, 2023

Filed

Feb 2, 2024

To disclose

14 weeks

Affected

1,066state residents only

Linked

6 filings

Confidence

70%
Full breach record for Advarra Holdings, Inc. →2 incidents on file

Advarra, Inc. reported unauthorized access to a single employee's account in Washington. Access occurred Oct 25-26, 2023. Advarra discovered the incident on Oct 26, 2023, disabled the account, and engaged cybersecurity experts. Affected data included names and SSNs. 1,066 Washington residents were notified. Incident status is contained.

Washington clock✗ WA AG >90d14 weeks discovery → filing

Incident timeline

undetected · 1 days
discovery → filing · 14 weeks / 99 days

Oct 25, 2023

Begins

Oct 26, 2023

Discovered

Feb 2, 2024

Filed

vs. sector median

+5 wks slower

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 59d gap

Filing propagation · 6 filings · 5 states

View merged incident ↗
Maine State AGDec 5 · first
Montana State AG+15d
Washington State AG+59d · this page
Maine State AG+71d
New Hampshire State AG+73d
Massachusetts State AG+80d

Pattern: first filing Dec 5 (ME), last Feb 23 (MA) — a 80-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.