HackingHealthcareHealthcareCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

Consulting Radiologists

bd_50ea62962f6053f1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 12, 2024

Filed

Aug 27, 2024

To disclose

28 weeks

Affected

Not disclosed

Linked

15 filings

Confidence

64%

Full breach record for Consulting Radiologists →

Consulting Radiologists LTD. (CRL) detected suspicious activity on February 12, 2024, leading to the discovery that an unauthorized actor accessed files and data on its network. The accessed data included names, addresses, dates of birth, Social Security numbers, health insurance information, and medical information. CRL engaged a forensic firm, secured its network, and deployed additional monitoring. Affected individuals are offered credit monitoring and fraud assistance. The incident is contained.

J jump to incidentP pin to compareR raw source

California clockDiscovered Feb 12, 2024 → Notified Aug 27, 2024197d ✗ CA 60-day late28 weeks discovery → filing

Incident timeline

discovery → filing · 28 weeks / 197 days

Feb 12, 2024

Begins

Feb 12, 2024

Discovered

Aug 27, 2024

Filed

vs. sector median

+16 wks slower

This filing is one of 15 about the same incident.View merged incident

A leak claim by qilin about this victim predates this filing by 198 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Maine State AGbd_daa30c9ef32cdbca2024-08-27Verified by operator
New Hampshire State AGbd_e1f9d17e915d51d42024-07-22 · +36dVerified by operator
Vermont State AGbd_8996de206fe6cdd52024-07-16 · +42dVerified by operator
New Hampshire State AGbd_c2b65bb4577a64172024-06-18 · +70dVerified by operator

Show 6 more filings ↓up to 74d gap

Montana State AGbd_2e90566000a585002024-06-14 · +74dVerified by operator
California State AGbd_65730f74869a357a2024-06-14 · +74dVerified by operator
Massachusetts State AGbd_a8a23b8b48b32fd52024-06-14 · +74dVerified by operator
HHS OCRbd_c3bdfc4c8390e5cf2024-06-14 · +74dVerified by operator
Maine State AGbd_ce63da405a317bbf2024-06-14 · +74dVerified by operator
Indiana State AGbd_eb428a7c019b32512024-06-14 · +74dVerified

Showing first 10 of 14 linked disclosures.

Name: Consulting Radiologists LTD.
norm: consulting radiologists
Domain: consultingsuccess.com

Name: Consulting Radiologists
norm: consulting radiologists
Domain: consultingradiologists.com
Industry: Healthcarellm

Discovered: Feb 12, 2024
Breach occurred: Feb 12, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 27, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDPHIHealth (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Took steps to secure its network
Engaged a specialized cybersecurity firm to investigate the nature and scope of the incident
Retained a leading forensic investigation firm who assisted in conducting an investigation and confirming the security of our network environment
Deployed additional monitoring tools
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Will continue to enhance the security of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(197 days from discovery to filing)
Compliance flags: CA 60-day late · 197dLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Feb 12, 2024
→ Notified: Aug 27, 2024
197d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Feb 12, 2024 → Notified: Aug 27, 2024	197d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 8 states

View merged incident ↗

Montana State AGJun 14 · first

California State AGJun 14 · first

Massachusetts State AGJun 14 · first

HHS OCRJun 14 · first

Maine State AGJun 14 · first

Indiana State AGJun 14 · first

New Hampshire State AG+4d

Vermont State AG+32d

New Hampshire State AG+38d

Maine State AG+74d

California State AG+74d · this page

Pattern: first filing Jun 14 (MT), last Aug 27 (CA) — a 74-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 14 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-590877
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 27, 2024
Raw hash: 7564c682421c7732aa223c51023fff1d4d76dbcfea1616cc3de9baa002f432e3

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityConsulting Radiologists LTD.

Victim entityConsulting Radiologists

Incidentdiscovered Feb 12, 2024

Stated responseTook steps to secure its network

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov