Social EngineeringProfessional ServicesProfessional ServicesPhishingDelayed DiscoveryMedium

MedicareCompareUSA

bd_4ad1162fc1d212e3 · schema v1 · pii pii-v1

Full breach record for MedicareCompareUSA →

MedicareCompareUSA, a business sector entity reported a phishing incident to the Washington Attorney General. The organization became aware of the incident on 2024-11-19 and filed notice on 2025-05-12. 1,768 Washington residents were affected. 174 days elapsed between awareness and notification. 14 days to identify the breach. 2 days to contain the breach.

Washington clock✗ WA AG >90d25 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_2fc94a37464c1182Indiana State AGfiled 2025-05-12Verified

Source provenance

Source URL: https://data.wa.gov/resource/sb4j-ca4h.json?id=19087
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 12, 2025
Raw hash: e8743514801919b09d206e6e9bdbc1f6708918e413c52783470427bd2db76686

Reporting entity

Name: MedicareCompareUSA
norm: medicarecompareusa

Victim entity

Name: MedicareCompareUSA
norm: medicarecompareusa
Industry: Professional Servicesllm

Incident

Discovered: Nov 19, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 1,768
Data types: —
Attack vector: Phishing
Threat actor: External

Compliance

Time to disclose: 25 weeks(174 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.