DisclosureLens
UnknownHealthcareHealthcareCustomer Data InvolvedEmployee Data InvolvedPHIHealth (basic)Government IDIdentity (basic)MediumContained

Bone & Joint Clinic, S.C.

bd_49594d62d05a0739 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 16, 2023

Filed

Mar 20, 2023

To disclose

9 weeks

Affected

7state residents only

Linked

7 filings

Confidence

67%
Full breach record for Bone & Joint Clinic, S.C.

Bone & Joint Clinic S.C. notified the NH Attorney General of a data security incident discovered on January 16, 2023. An investigation determined that personal information, including administrative and medical files and potentially Social Security numbers, may have been acquired without authorization. Seven New Hampshire residents were affected. The organization engaged cybersecurity experts, notified the FBI, and offered credit monitoring and identity protection services.

Incident timeline

discovery → filing · 9 weeks / 63 days

Jan 16, 2023

Discovered

Mar 20, 2023

Filed

vs. sector median

3 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Show 2 more filingsup to 13d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗
Vermont State AGMar 7 · first
Indiana State AGMar 7 · first
New Hampshire State AG+13d · this page

Pattern: first filing Mar 7 (VT), last Mar 20 (NH) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.