DisclosureLens
PhysicalTechnologyInformationTheftCustomer Data InvolvedGovernment IDIdentity (basic)CriticalContained

Med-data incorporated

bd_52a39a7ea123b7a3 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Feb 5, 2021

Filed

Jul 16, 2021

To disclose

23 weeks

Affected · nationwide

135,90813 in this filing

Linked

9 filings

Confidence

66%
Full breach record for Med-data incorporated

Med-Data Incorporated reported the loss or theft of a device containing personal information, including names and Social Security Numbers, affecting 135,908 individuals. The breach occurred on December 24, 2018, and was discovered on February 5, 2021. Written notification was sent on March 31, 2021, offering 12 months of credit monitoring and identity protection services through IDX. 13 Maine residents were affected.

Maine clockDiscovered Feb 5, 2021Filed with AG Jul 16, 2021161d ME AG >90d23 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 774 days
discovery → filing · 23 weeks / 161 days

Dec 24, 2018

Begins

Feb 5, 2021

Discovered

Jul 16, 2021

Filed

vs. sector median

+4 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filingsup to 107d gap

Filing propagation · 9 filings · 9 states

View merged incident ↗
Hawaii State AGMar 31 · first
Indiana State AGMar 31 · first
Montana State AGMar 31 · first
Maine State AG+107d · this page

Pattern: first filing Mar 31 (HI), last Jul 16 (ME) — a 107-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.