DisclosureLens
ARKANSASHackingHealthcareFinancial ServicesHealthcareBusiness Associate (HIPAA)Customer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Health (basic)MediumContained

Walmart Associates Health and Welfare Plan

bd_56d844f9834f1f95 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 4, 2023

To disclose

—

Affected

85,952

Confidence

96%
Full breach record for Walmart Associates Health and Welfare Plan →

Walmart Associates Health and Welfare Plan (AR) reported to HHS on 2023-10-04 a Hacking/IT Incident affecting 85,952 individuals. A vendor of its business associate experienced a cybersecurity incident that compromised PHI including names, addresses, dates of birth, and health insurance information. Breached information located on Network Server. The CE notified HHS, affected individuals, the media, and provided substitute notice. The BA and its vendor subsequently strengthened technical safeguards.

HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline — partial

? — ?

Breach window unknown

Oct 4, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed85,952 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.