DisclosureLens
FEDERALItem 8.01 · voluntaryHackingTechnologyHealthcareInformationPIIPHILowActive

Inotiv, Inc.

bd_4ed29cc97ce8d680 · schema v1 · pii pii-v1

Severity

Low

Discovered

Filed

Sep 25, 2025

To disclose

Affected

Not disclosed

Linked

16 filings

Confidence

65%
Full breach record for Inotiv, Inc.

Inotiv, Inc. filed an 8-K on September 25, 2025, disclosing a cybersecurity incident (the 2025 Cybersecurity Incident) referenced in a prior August 18 filing. Three putative class actions (Doyal, Merrell, Wagner) were filed alleging that class members were harmed when their personally identifying information and protected health information was impacted by the incident. The Company states the investigation is ongoing, the full scope is unknown, and it has not yet determined if the incident is material. Operations are partially disrupted but product delivery continues.

Leak gap clock Leak >30d
no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Sep 25, 2025

Filed

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 16 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 48 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filingsup to 95d gap

Showing first 10 of 15 linked disclosures.

Filing propagation · 11 filings · 7 states

View merged incident ↗

Pattern: first filing Sep 25, last Dec 29 (TX) — a 95-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.