UnknownOtherIdentity (basic)PHIHealth (basic)Medium

Open Practice

bd_91061fd500e0407d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 12, 2025

Filed

Oct 14, 2025

To disclose

9 weeks

Affected · nationwide

21,2651,859 in this filing

Linked

5 filings

Confidence

95%

Full breach record for Open Practice →

Open Practice Solutions, LTD based in Hudson, Ohio, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-08-12 and reported on 2025-10-14. 1,859 Texas residents were affected. 21,265 individuals affected in total. Types of information involved: Name of individual;Medical Information. Consumers were notified via Posted at company website or special website;U.S. Mail.

J jump to incidentP pin to compareR raw source

Texas clock✗ TX AG >30d9 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 47 days

discovery → filing · ≤ 9 weeks / 63 days

Jun 26, 2025

Begins

Aug 12, 2025

Discovered

Oct 14, 2025

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Washington State AGbd_657ec1805d4a31b42025-10-10 · +4dVerified
California State AGbd_b2f9d95449270f602025-10-10 · +4dVerified
Vermont State AGbd_dcd5395163f6c58f2025-10-10 · +4dVerified
Illinois State AGbd_f4eeba1d1d2ded1e2025-10-01 · +13dCandidate

Name: Open Practice
norm: open practice
Domain: openpractice.net

Name: Open Practice
norm: open practice
Domain: openpractice.net
Industry: Otherllm

Discovered: Aug 12, 2025
Breach occurred: Jun 26, 2025
Undetected for: 47 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 21,265state + nationwide
Data types: PHIPII
Data elements: NameMedical information
Attack vector: Unknown

Time to disclose: 9 weeks(63 days from discovery to filing)
Compliance flags: TX AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGOct 1 · first

Washington State AG+9d

California State AG+9d

Vermont State AG+9d

Texas State AG+13d · this page

Pattern: first filing Oct 1 (IL), last Oct 14 (TX) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0004608
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 14, 2025
Raw hash: 6926c2fba9e0a4454523d75518876a140f06981867d4b0d2efa5462523b5b01f

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityOpen Practice

Victim entityOpen Practice

Incidentdiscovered Aug 12, 2025

ComplianceTX AG >30d

Extraction provenanceno artifact recorded

Source provenanceoag.my.site.com