Endue Software
bd_7345eadbe357342d · schema v1 · pii pii-v1
Full breach record for Endue Software →Endue Software, a provider of infusion care management software, experienced unauthorized access to certain internal systems on February 16, 2025. The company discovered the incident on February 17, 2025. An unauthorized actor accessed systems for a brief period and copied files containing names, dates of birth, Social Security numbers, and medical record numbers of individuals whose information was provided by Twelfth One, LLC. Endue secured its systems, notified law enforcement and regulators, and is offering credit monitoring and fraud assistance to affected individuals. The incident is contained.
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_08920fbd0889d482Indiana State AGfiled 2025-04-11Verified
- bd_15dd0c0c8fb43bf4HHS OCRfiled 2025-04-11Verified
- bd_1ff35c438b26be88New Hampshire State AGfiled 2025-04-11Verified
- bd_2ba6e7caea77b873Vermont State AGfiled 2025-04-11Verified
Show 3 more filings ↓Show fewer ↑
- bd_3f9524f86d2e0052Maine State AGfiled 2025-04-11Verified
- bd_5bc86c50c5edfc76Vermont State AGfiled 2025-04-11Verified
- bd_96d712f75f14a6b9Montana State AGfiled 2025-04-11Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-601299
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 11, 2025
- Raw hash
- 417441e69904c14ef8e3b3a821d1cce198a9d37fadbab016bc1ad381197614ea
Reporting entity
- Name
- Endue Softwarenorm: endue software
Victim entity
- Name
- Endue Softwarenorm: endue software
Incident
- Discovered
- Feb 17, 2025
- Materiality determined
- —
- Notification sent
- Apr 11, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified relevant regulators
Compliance
- Time to disclose
- 8 weeks(53 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 53d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 17, 2025→ Notified: Apr 11, 202553d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.