UnknownLow
CHANGE HEALTHCARE INC.
bd_788f5843714453cb · schema v1 · pii pii-v1
Full breach record for CHANGE HEALTHCARE INC. →Change Healthcare Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2024-08-03. The breach occurred during 2/12/2024 - 2/22/2024. The breach was discovered on 3/13/2024. 250 individuals were affected. Notice was sent on 7/29/2024.
Oregon clock✗ OR AG >45d20 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_6999730badb3aebbCalifornia State AGfiled 2024-08-03Verified
- bd_dc48a09555e80a91Washington State AGfiled 2024-08-03Verified
- bd_20fef244fbf67f71Montana State AGfiled 2024-08-02(1d gap)Verified
- bd_546b3d03391ed182New Hampshire State AGfiled 2024-08-02(1d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 44d gap
- bd_1467986906075ca0Vermont State AGfiled 2024-07-29(5d gap)Verified
- bd_7573d03228639e7bHHS OCRfiled 2024-07-19(15d gap)Verified
- bd_1091c4bb67ec440aOregon State AGfiled 2024-09-16(44d gap)Verified
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 3, 2024
- Raw hash
- f1e717780fc172ccd2cda8c64baebfbc40ef4b51823efded6fe8ac72c0f37445
Reporting entity
- Name
- CHANGE HEALTHCARE INC.norm: change healthcare
- Domain
- changehealthcare.com
Victim entity
- Name
- CHANGE HEALTHCARE INC.norm: change healthcare
- Domain
- changehealthcare.com
Incident
- Discovered
- Mar 13, 2024
- Materiality determined
- —
- Notification sent
- Jul 29, 2024
- Affected individuals
- 250
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 20 weeks(143 days from discovery to filing)
- Compliance flags
- OR AG >45d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.