HackingHealthcareHealthcareStolen CredentialsData ExfiltratedCustomer Data InvolvedFinancial accountHealth (basic)Identity (basic)Government IDPHIHighContained

Octapharma Plasma, Inc.

bd_9e19a3be7beab16f · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 17, 2024

Filed

Aug 30, 2024

To disclose

19 weeks

Affected

9,127state residents only

Linked

9 records

Confidence

70%

Full breach record for Octapharma Plasma, Inc. →

Octapharma Plasma, Inc. reported a cyberattack on April 17, 2024, where an unauthorized party accessed file share systems. The incident impacted personal information of 9,127 Washington residents, including names, SSNs, driver's licenses, payment card numbers, and health information. The incident was contained, and the company engaged third-party experts and the FBI. Notices were sent on August 30, 2024, offering two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d19 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 19 weeks / 135 days

Apr 17, 2024

Begins

Apr 17, 2024

Discovered

Aug 30, 2024

Filed

vs. sector median

+10 wks slower

This filing is one of 9 records about the same incident.View merged incident

A leak claim by blacksuit about this victim was first seen 129 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblacksuitbd_580edc4845b6f56c2024-04-15 · +137dVerified by operator

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_9e046345d8d63c4d2024-08-30Verified
Oregon State AGbd_eddf2253a2b1ce3e2024-09-15 · +16dVerified
California State AGbd_10c15797aebfb8912024-09-19 · +20dVerified
Massachusetts State AGbd_0d6a42ef1e1214a32024-09-20 · +21dVerified

Show 2 more filings ↓up to 29d gap

South Carolina State AGbd_90afedd7ea903d802024-09-20 · +21dVerified
Illinois State AGbd_2ee8dd80fea628e32024-08-01 · +29dCandidate

Press reports (1)

Pressblacksuitbd_b79d0cb85c75fedf2024-04-15 · +137dCandidate

Name: HOGAN LOVELLS US LLP
norm: hogan lovells us

Name: Octapharma Plasma, Inc.
norm: octapharma plasma
Domain: octapharmaplasma.com
Industry: Healthcarellm

Discovered: Apr 17, 2024
Breach occurred: Apr 17, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 30, 2024
Affected individuals: 9,127state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General
Initial access: valid_credentials

During the incident: Triggered its incident response processes
Launching an investigation with the assistance of third-party cybersecurity experts and the FBI
Took steps to secure the systems and contain the incident
Notified law enforcement
Providing notice by mail to affected Washington residents
Offering credit monitoring and identity protection services for two years through IDX
Changes made: Working to further enhance its security controls
Undertaking a review of its technical security safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(135 days from discovery to filing)
Compliance flags: WA AG >90dLeak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGAug 1 · first

Indiana State AG+29d

Washington State AG+29d · this page

Oregon State AG+45d

California State AG+49d

Massachusetts State AG+50d

South Carolina State AG+50d

Pattern: first filing Aug 1 (IL), last Sep 20 (SC) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA30414.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 30, 2024
Raw hash: 970cf75f176c82004937aae48b1b6055a3da973377a70784b2203170e6fd8221

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Press reports (1)

Reporting entityHOGAN LOVELLS US LLP

Victim entityOctapharma Plasma, Inc.

Incidentdiscovered Apr 17, 2024

Stated responseTriggered its incident response processes

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com