HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHILowContained
Academic Urology & Urogynecology of Arizona
bd_56e521e1e168bb64 · schema v1 · pii pii-v1
Full breach record for Academic Urology & Urogynecology of Arizona →Academic Urology & Urogynecology of Arizona (division of Palo Verde Hematology and Oncology) suffered an external network breach May 18-22, 2025. Unauthorized access to files containing personal/protected health information was not discovered until Jan 30, 2026. Total affected: 73,281 nationwide, 6 Maine residents. Notifications sent Feb 12, 2026; 12 months of IDX identity monitoring offered.
Leak gap clock✗ Leak >180d13 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6 affectedView incident
A leak claim by inc_ransom about this victim predates this filing by 240 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ed1a15c6-0216-467a-a4a8-fe24c9e8d811.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 12, 2026
- Raw hash
- 4afc12f3c63192236081749dc633f959f033bc93d85e118ece23f8d73cc83ef4
Reporting entity
- Name
- Academic Urology & Urogynecology of Arizonanorm: academic urology urogynecology of arizona
- Domain
- academicuroaz.com
- Industry
- Healthcare
Victim entity
- Name
- Academic Urology & Urogynecology of Arizonanorm: academic urology urogynecology of arizona
- Domain
- academicuroaz.com
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jan 30, 2026
- Materiality determined
- Jan 30, 2026
- Notification sent
- Feb 12, 2026
- Affected individuals
- 6
- Data types
- PIIPHI
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 13 days(13 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 13d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 30, 2026→ Filed with AG: Feb 12, 202613d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.