UnknownHigh
NextGen Healthcare, Inc.
bd_7a7f5ee7fb7c68c8 · schema v1 · pii pii-v1
Full breach record for NextGen Healthcare, Inc. →NextGen Healthcare, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-04. The breach occurred during 3/29/2023 - 4/14/2023. The breach was discovered on 4/24/2023. 1,049,375 individuals were affected. Notice was sent on 4/28/2023.
Oregon clock✓ OR AG ≤45d10 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_5e938c6c211b169dNew Hampshire State AGfiled 2023-05-05(1d gap)Verified
- bd_67403124c4531ddcMaine State AGfiled 2023-05-05(1d gap)Verified
- bd_f1137d837aea9e06California State AGfiled 2023-05-05(1d gap)Verified
- bd_7e4510c6361c4a71Washington State AGfiled 2023-05-03(1d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 7d gap
- bd_03d4dffa3da1766cMontana State AGfiled 2023-04-28(6d gap)Candidate
- bd_1c6d555d72e68d6fDelaware State AGfiled 2023-04-28(6d gap)Verified
- bd_33ab8daf3c08c256Vermont State AGfiled 2023-04-27(7d gap)Verified
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 4, 2023
- Raw hash
- cb26fe909660011e569a8ab6c071f8b41ae466eddae6c8c9976d63066bd522f3
Reporting entity
- Name
- NextGen Healthcare, Inc.norm: nextgen healthcare
Victim entity
- Name
- NextGen Healthcare, Inc.norm: nextgen healthcare
Incident
- Discovered
- Apr 24, 2023
- Materiality determined
- —
- Notification sent
- Apr 28, 2023
- Affected individuals
- 1,049,375
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- OR AG ≤45d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.