Express Scripts, Inc.
bd_8ae6086e173bb504 · schema v1 · pii pii-v1
Full breach record for Express Scripts, Inc. →6 incidents on fileExpress Scripts notified Montana members of unauthorized access to their mobile app accounts between April 30 and May 3, 2022. The attacker used stolen credentials from a third-party breach. Prescription history was accessed. Express Scripts locked accounts and offered Equifax identity theft protection.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 30, 2022
Begins
May 1, 2022
Discovered
Jul 10, 2022
Filed
vs. sector median
3 wks faster
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- California State AGbd_ced8b9f8cc34a5162022-06-03 · +37dCandidate
- Montana State AGbd_c05ac047f6d070132022-06-01 · +39dVerified
- Delaware State AGbd_692ca0e73337b6e02022-05-30 · +41dCandidate
- Illinois State AGbd_49a4a002044791612023-01-01 · +175dVerified
Show 2 more filings ↓Show fewer ↑up to 175d gap
- Illinois State AGbd_90fb1332627303d92023-01-01 · +175dVerified
- Illinois State AGbd_e992370054ec45c52023-01-01 · +175dVerified
Filing propagation · 7 filings · 4 states
View merged incident ↗Pattern: first filing May 30 (DE), last Jan 1 (IL) — a 216-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.