UnknownHigh

EpiSource

bd_61b844bea6eb84e8 · schema v1 · pii pii-v1

Episource, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2025-06-06. The breach occurred during 1/27/2025 - 2/6/2025. The breach was discovered on 5/30/2025. 5,418,866 individuals were affected. Notice was sent on 6/6/2025.

Oregon clock✓ OR AG ≤45d7 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

This filing is one of 14 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

bd_63544f6aac5ae4a4Washington State AGfiled 2025-06-06Verified
bd_b89e0c880448cf1bCalifornia State AGfiled 2025-07-11(35d gap)Verified
bd_00920f0067d5e69dCalifornia State AGfiled 2025-07-31(55d gap)Verified
bd_95baeb3422bb54e2Montana State AGfiled 2025-07-31(55d gap)Verified

Show 6 more filings ↓up to 188d gap

bd_1b92ab769d91dc2aCalifornia State AGfiled 2025-09-11(97d gap)Verified by operator
bd_9fdbc50e284e387eCalifornia State AGfiled 2025-09-22(108d gap)Verified by operator
bd_f7b2fef6a5a68d49California State AGfiled 2025-10-01(117d gap)Verified by operator
bd_9fbf33f1d80fd6cdCalifornia State AGfiled 2025-10-15(131d gap)Verified by operator
bd_8bfabd788a54c7ddMontana State AGfiled 2025-11-12(159d gap)Verified by operator
bd_a777c7526ecf94bdOregon State AGfiled 2025-12-11(188d gap)Verified by operator

Showing first 10 of 13 linked disclosures.

Source provenance

Source URL: https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 6, 2025
Raw hash: e474257489c67c63f7f4f6fb6210e2186ca0d639327543252135973321650855

Reporting entity

Name: EpiSource
norm: episource

Victim entity

Name: EpiSource
norm: episource

Incident

Discovered: May 30, 2025
Materiality determined: —
Notification sent: Jun 6, 2025
Affected individuals: 5,418,866
Data types: —
Attack vector: Unknown
Threat actor: External

Compliance

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: OR AG ≤45d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.