DisclosureLens
UnknownHealthcareHealth (basic)Identity (basic)Government IDPIIMediumContained

Kentucky Mountain Health Alliance, Inc.

bd_83a570f28d6f876d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Filed

Jun 19, 2026

To disclose

Affected

4state residents only

Linked

5 filings

Confidence

66%
Full breach record for Kentucky Mountain Health Alliance, Inc.

Kentucky Mountain Health Alliance, Inc. issued a breach notification to Massachusetts residents regarding a security incident involving personal information. The company provided affected individuals with a complimentary two-year identity monitoring membership through Epiq, including credit monitoring, dark web monitoring, and identity theft insurance. The notice outlines steps for placing security freezes and fraud alerts with credit bureaus.

Incident timeline — partial

? — ?

Breach window unknown

Jun 19, 2026

Filed

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGJun 12 · first
Nebraska State AGJun 12 · first
Massachusetts State AG+7d · this page

Pattern: first filing Jun 12 (IN), last Jun 19 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.