DisclosureLens
HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedPHIPIIIdentity (basic)MediumContained

Access Sports Medicine & Orthopaedics

bd_5d4084495ab085f7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 10, 2024

Filed

Sep 17, 2024

To disclose

19 weeks

Affected

73,976state residents only

Linked

3 filings

Confidence

67%
Full breach record for Access Sports Medicine & Orthopaedics →2 incidents on file

Access Sports Medicine & Orthopaedics notified the New Hampshire Attorney General of a cybersecurity incident discovered on May 10, 2024. An unauthorized actor accessed the network, compromising PHI and PII of 73,976 New Hampshire residents. The company engaged forensic investigators, secured its network, and offered credit monitoring services to affected individuals.

Leak gap clock⏱ Leak >90d19 weeks discovery → filing

Incident timeline

discovery → filing · 19 weeks / 130 days

May 10, 2024

Discovered

Sep 17, 2024

Filed

vs. sector median

+8 wks slower

This filing is one of 3 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 132 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Montana State AGSep 12 · first
New Hampshire State AG+5d · this page

Pattern: first filing Sep 12 (MT), last Sep 17 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.