HackingHealthcareHealthcareStolen CredentialsPhishingData ExfiltratedTargetedPIIIdentity (basic)MediumContained

Apria Healthcare LLC

bd_51e8800d8028d4c0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 1, 2021

Filed

May 23, 2023

To disclose

21 months

Affected

16,003state residents only

Linked

10 filings

Confidence

64%

Full breach record for Apria Healthcare LLC →6 incidents on file

Apria Healthcare, LLC reported unauthorized access to its systems by an unauthorized third party between April 2019 and October 2021. The entity detected the incident on September 1, 2021. The attacker accessed emails and files, potentially to commit fraud. Apria engaged the FBI and forensic investigators, implemented security measures, and offered one year of Kroll identity monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due21 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 880 days

discovery → filing · 21 months / 629 days

Apr 5, 2019

Begins

Sep 1, 2021

Discovered

May 23, 2023

Filed

vs. sector median

+78 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Massachusetts State AGbd_1f701cba90e72cd52023-05-22 · +1dVerified
Indiana State AGbd_2e2c65b37bdc95c62023-05-22 · +1dVerified
Oregon State AGbd_484942091b9acd622023-05-22 · +1dCandidate
Delaware State AGbd_a0195e3f90a18f772023-05-22 · +1dVerified

Show 5 more filings ↓up to 8d gap

Maine State AGbd_a2be55087df281902023-05-22 · +1dVerified
Montana State AGbd_c1a512d17d99444f2023-05-22 · +1dVerified
California State AGbd_ca14fb87d20497f22023-05-22 · +1dVerified
Washington State AGbd_e12921387568e40f2023-05-22 · +1dVerified
New Hampshire State AGbd_95d978c59636df322023-05-31 · +8dVerified

Name: Apria Healthcare LLC
norm: apria healthcare
Domain: apria.com

Name: Apria Healthcare LLC
norm: apria healthcare
Domain: apria.com
Industry: Healthcarellm

Discovered: Sep 1, 2021
Breach occurred: Apr 5, 2019 – Oct 10, 2021
Undetected for: 880 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 16,003state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: working with the Federal Bureau of Investigation (FBI)
Initial access: valid_credentials

During the incident: Working with the Federal Bureau of Investigation (FBI)
Hiring a reputable forensic investigation team to investigate and securely resolve the incident
Implemented additional security measures upon the guidance and recommendation of our forensic investigators
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Changes made: Implemented additional security measures upon the guidance and recommendation of our forensic investigators
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 months(629 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Massachusetts State AGMay 22 · first

Indiana State AGMay 22 · first

Oregon State AGMay 22 · first

Delaware State AGMay 22 · first

Maine State AGMay 22 · first

Montana State AGMay 22 · first

California State AGMay 22 · first

Washington State AGMay 22 · first

South Carolina State AG+1d · this page

New Hampshire State AG+9d

Pattern: first filing May 22 (MA), last May 31 (NH) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2023/ApriaHealthcare.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 23, 2023
Raw hash: 073624e75978feb0520e2b57577aca399513e23e88838877c1d939a48be9c839

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityApria Healthcare LLC

Victim entityApria Healthcare LLC

Incidentdiscovered Sep 1, 2021

Stated responseWorking with the Federal Bureau of Investigation (FBI)

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov