AccidentalHealthcareTechnologyHealthcareMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumContained

BlueRock Therapeutics

bd_4b4e8b0c7d719c17 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 12, 2026

To disclose

—

Affected

Not disclosed

Confidence

67%

Full breach record for BlueRock Therapeutics →

BlueRock Therapeutics LP notified Massachusetts residents of a security incident involving the unauthorized upload of personal information (name, SSN, DOB) to a third-party service. The company investigated, removed the document, and offered 24 months of credit monitoring. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 12, 2026

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: BlueRock Therapeutics
norm: bluerock therapeutics
Domain: expditestudy.com

Name: BlueRock Therapeutics
norm: bluerock therapeutics
Domain: expditestudy.com
Industry: HealthcarellmTechnologyllm

Discovered: —
Materiality determined: —
Notification sent: Mar 12, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Misconfiguration
MITRE ATT&CK: T1567 Exploit Trusted Relationship

During the incident: Took steps to investigate the matter and review the data involved
Reached out to the third party that operates the service
Took steps to have the document removed from the third party’s systems and any related archives
Updating employee guidance and training in response to this incident
Offering complimentary credit monitoring and identity theft protection services through Experian for 24 months
Changes made: Updating employee guidance and training in response to this incident
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-371-bluerock-therapeutics-lp/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 12, 2026
Raw hash: eee363424e17c7fefbb70ec643b4b715713b180f905fd19c32d8c66d66ea4b4f

Reporting entityBlueRock Therapeutics

Victim entityBlueRock Therapeutics

IncidentMisconfiguration

Stated responseTook steps to investigate the matter and review the data involved

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov