HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedIdentity (basic)Health (basic)Financial accountPIILowContained

CAPSULE GROUP, LLC

bd_7fdbc72be00aa912 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 5, 2022

Filed

Jul 30, 2022

To disclose

17 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for CAPSULE GROUP, LLC →2 incidents on file

On April 5, 2022, Capsule discovered that unauthorized threat actors gained access to certain customer accounts. The incident involved demographic information (name, email, phone, address, DOB, sex), health information (medical conditions, prescribed medications), past order history, limited payment information (last 4 digits of card, expiration date), insurance information, and chat messages. Capsule engaged a third-party forensic firm, reset passwords, implemented additional security safeguards, and offered 12 months of complimentary Experian IdentityWorks identity protection services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 5, 2022 → Notified May 27, 202252d ✓ CA 60-day OK17 weeks discovery → filing

Incident timeline

discovery → filing · 17 weeks / 116 days

Apr 5, 2022

Begins

Apr 5, 2022

Discovered

Jul 30, 2022

Filed

vs. sector median

+5 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: CAPSULE GROUP, LLC
norm: capsule group
Domain: capsule.com

Name: CAPSULE GROUP, LLC
norm: capsule group
Domain: capsule.com
Industry: Healthcarellm

Discovered: Apr 5, 2022
Breach occurred: Apr 5, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 27, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Health (basic)Financial accountPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Immediately began an investigation with the assistance of a third-party forensic firm
Reset passwords for potentially compromised accounts
Implemented additional security safeguards
Offering complimentary access to Experian IdentityWorks for 12 months
Changes made: Implemented additional security safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(116 days from discovery to filing)
Compliance flags: CA 60-day OK · 52d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 5, 2022
→ Notified: May 27, 2022
52d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 5, 2022 → Notified: May 27, 2022	52d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-555781
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 30, 2022
Raw hash: 639dd78a8b0c28e278990c5be4798d9bce9ba37fd9c7920a783b0b77c8196e34

Reporting entityCAPSULE GROUP, LLC

Victim entityCAPSULE GROUP, LLC

Incidentdiscovered Apr 5, 2022

Stated responseImmediately began an investigation with the assistance of a third-party forensic firm

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov