HackingTechnologyHealthcareInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountHighContained

Connexin Software, Inc.

bd_a4c6d762fac543f5 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 26, 2022

Filed

Nov 14, 2022

To disclose

11 weeks

Affected

41,156state residents only

Linked

7 filings

Confidence

66%

Full breach record for Connexin Software, Inc. →2 incidents on file

Connexin Software, Inc. notified affected individuals in South Carolina of a data breach detected on August 26, 2022. An unauthorized party accessed an offline set of patient data used for conversion and troubleshooting, removing some data. The live electronic record system was not accessed. Compromised data included demographics, SSNs, health insurance info, medical records, and billing data. Connexin engaged forensic experts, reset passwords, enhanced security, and offered one year of Kroll identity monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due11 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 11 weeks / 80 days

Aug 26, 2022

Discovered

Nov 14, 2022

Filed

vs. sector median

7 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_1714e873907ffbd72022-11-14Verified
Oregon State AGbd_5b34d1b03ca82c402022-11-14Verified
Montana State AGbd_a2703f9eb481b2012022-11-14Verified
HHS OCRbd_fd18f9fae5f5fe0a2022-11-11 · +3dVerified

Show 2 more filings ↓up to 14d gap

Massachusetts State AGbd_ba794324e12990b22022-11-28 · +14dVerified
New Hampshire State AGbd_d5db1475a509da852022-11-28 · +14dVerified

Name: Connexin Software, Inc.
norm: connexin software

Name: Connexin Software, Inc.
norm: connexin software
Industry: TechnologyllmHealthcarellm

Discovered: Aug 26, 2022
Materiality determined: —
Notification sent: —
Affected individuals: 41,156state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged third-party forensic experts to determine the nature and scope of the incident
Reset password of all corporate accounts
Moved all patient data used for data conversion and troubleshooting into an environment with even greater security
Retained a third-party cybersecurity forensic firm to investigate the issue
Working with law enforcement to investigate the incident
Enhanced its security and monitoring
Further hardened its systems as appropriate
Offered identity monitoring services for a period of one year, at no cost, through Kroll
Changes made: Enhanced its security and monitoring
Further hardened its systems as appropriate to minimize the risk of any similar incident in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(80 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

HHS OCRNov 11 · first

California State AG+3d

Oregon State AG+3d

Montana State AG+3d

South Carolina State AG+3d · this page

Massachusetts State AG+17d

New Hampshire State AG+17d

Pattern: first filing Nov 11 (PA), last Nov 28 (NH) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2022/ConnexinSoftwareInc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 14, 2022
Raw hash: 68fae634af7d9a91ebe8f01d0c812046f7c6ad3e8c1bebbcfe8a05fde5b6c80f

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityConnexin Software, Inc.

Victim entityConnexin Software, Inc.

Incidentdiscovered Aug 26, 2022

Stated responseEngaged third-party forensic experts to determine the nature and scope of the incident

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov