DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedBusiness Associate (HIPAA)Identity (basic)PHIHealth (basic)LowContained

Navvis & Company, LLC

bd_495a8622b7338450 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 25, 2023

Filed

Dec 29, 2023

To disclose

22 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

64%
Full breach record for Navvis & Company, LLC5 incidents on file

Navvis & Company, LLC, a health management services provider, reported unauthorized access to its network between July 12 and July 25, 2023. The company identified suspicious activity on July 25, 2023. Affected data may include names and health-related information. Navvis is a business associate of SSM Health. The company secured its network, launched an investigation, and offered credit monitoring to affected individuals.

California clockDiscovered Jul 25, 2023Notified Dec 29, 2023157d CA 60-day late22 weeks discovery → filing

Incident timeline

undetected · 13 days
discovery → filing · 22 weeks / 157 days

Jul 12, 2023

Begins

Jul 25, 2023

Discovered

Dec 29, 2023

Filed

vs. sector median

+10 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filingsup to 46d gap

Filing propagation · 8 filings · 6 states

View merged incident ↗
Oregon State AGDec 29 · first
Washington State AGDec 29 · first
California State AGDec 29 · first · this page

Pattern: first filing Dec 29 (OR), last Feb 13 (SC) — a 46-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.