DisclosureLens
HackingHealthcareHealthcareStolen CredentialsTargetedData ExfiltratedIdentity (basic)Government IDHealth (basic)Financial accountHighContained

21st Century Oncology

bd_527c87e1e91d5b94 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 13, 2015

Filed

Apr 28, 2016

To disclose

24 weeks

Affected

97,842state residents only

Linked

8 filings

Confidence

64%
Full breach record for 21st Century Oncology

21st Century Oncology notified patients that an unauthorized third party accessed a database containing names, SSNs, diagnosis/treatment info, and insurance data. The intrusion occurred on Oct 3, 2015, and was discovered on Nov 13, 2015, after FBI notification. Notification was delayed per FBI request. The company hired forensic investigators and enhanced security protocols. No evidence of medical record access or misuse was found. Affected individuals were offered one year of credit monitoring.

South Carolina clock SC CRA notice due24 weeks discovery → filing

Incident timeline

undetected · 41 days
discovery → filing · 24 weeks / 167 days

Oct 3, 2015

Begins

Nov 13, 2015

Discovered

Apr 28, 2016

Filed

vs. sector median

+13 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filingsup to 609d gap

Filing propagation · 8 filings · 7 states

View merged incident ↗
Washington State AGMar 4 · first
California State AGMar 4 · first
HHS OCRMar 4 · first
South Carolina State AG+55d · this page

Pattern: first filing Mar 4 (WA), last Dec 28 — a 664-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.