Insulet Corporation
bd_4b77c0e779b47ea3 · schema v1 · pii pii-v1
Full breach record for Insulet Corporation →8 incidents on fileInsulet Corporation disclosed a data privacy incident affecting Omnipod DASH customers. On or about December 1, 2022, the company sent MDC acknowledgment emails containing unique verification URLs. These URLs exposed customer IP addresses, Omnipod DASH usage, and Personal Diabetes Manager (PDM) usage to website performance and marketing partners via cookies and trackers. Insulet discovered the incident on December 6, 2022, and disabled the tracking codes that same day. No financial information, SSNs, emails, or passwords were exposed. The notice was sent to customers on January 5, 2023.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 1, 2022
Begins
Dec 6, 2022
Discovered
Jan 5, 2023
Filed
vs. sector median
8 wks faster
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- HHS OCRbd_2cb545435cd825282023-01-05Verified
- Washington State AGbd_ac854debf0ab0ad92023-01-05Verified
- Montana State AGbd_b72b9465f971309e2023-01-09 · +4dVerified
- Illinois State AGbd_4e14c83bbb87dd602023-01-01 · +4dVerified
Show 2 more filings ↓Show fewer ↑up to 15d gap
- California State AGbd_09375a81f3d038e82023-01-10 · +5dVerified
- Delaware State AGbd_c92cd96665cb31502022-12-21 · +15dCandidate
Filing propagation · 7 filings · 6 states
View merged incident ↗Pattern: first filing Dec 21 (DE), last Jan 10 (CA) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.