Equinox, LLC
bd_8e7e2bdb52f33252 · schema v1 · pii pii-v1
Full breach record for Equinox, LLC →Equinox, Inc. (NY, Healthcare Provider) reported to HHS OCR on 2024-11-15 a ransomware incident affecting 21,565 individuals. Breached information was located on a Network Server. PHI involved included names, addresses, dates of birth, Social Security numbers, driver's license/government ID numbers, passport numbers, financial information, health insurance information, diagnoses, medications, and other treatment information. The CE notified HHS, affected individuals, and the media, posted substitute notice on its website, and implemented additional safeguards and staff training in response.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_206cab45d2fd0f75Vermont State AGfiled 2024-11-15Candidate
- bd_e3e39d1b67958f8fIndiana State AGfiled 2024-11-15Verified
- bd_16c1983b7f3adc9eMaine State AGfiled 2024-11-18(3d gap)Candidate
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Nov 15, 2024
- Raw hash
- 5ea49102789fd4a47767d86e51fba8306bec75b6e5b739af62bc652722a38c78
Source filing
Reporting entity
- Name
- Equinox, LLCnorm: equinox
- Industry
- Health Care Services
Victim entity
- Name
- Equinox, LLCnorm: equinox
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Sep 16, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 21,565
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- HHS OCR notified
Compliance
- Compliance flags
- HHS notified
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Sep 16, 2024→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.