DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Carolina Arthritis

bd_8076b43f1a07995d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 27, 2024

Filed

Feb 27, 2025

To disclose

22 weeks

Affected

1state residents only

Linked

9 filings

Confidence

65%
Full breach record for Carolina Arthritis

Carolina Arthritis Associates experienced a data security incident on September 27, 2024, involving unauthorized access to certain files. The organization discovered the incident on the same date. A review determined that personal information, including names and potentially Social Security numbers or driver's license numbers, of one Maryland resident was involved. The company engaged cybersecurity experts, secured its network, reported the incident to the FBI, and offered 12 months of complimentary identity protection services to the affected individual.

Maryland clock MD AG >90d22 weeks discovery → filing

Incident timeline

discovery → filing · 22 weeks / 153 days

Sep 27, 2024

Begins

Sep 27, 2024

Discovered

Feb 27, 2025

Filed

vs. sector median

+10 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Show 3 more filingsup to 1d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗
New Hampshire State AGFeb 27 · first
Maine State AGFeb 27 · first
HHS OCRFeb 27 · first
Vermont State AGFeb 27 · first
Massachusetts State AGFeb 27 · first
Indiana State AGFeb 27 · first
Maryland State AGFeb 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.