UnknownHigh
EpiSource
bd_a777c7526ecf94bd · schema v1 · pii pii-v1
Full breach record for EpiSource →Episource, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2025-12-11. The breach occurred during 1/27/2025. The breach was discovered on 2/6/2025. 6,584,876 individuals were affected. Notice was sent on 11/12/2025.
Oregon clock✗ OR AG >45d44 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 14 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_8bfabd788a54c7ddMontana State AGfiled 2025-11-12(29d gap)Verified by operator
- bd_9fbf33f1d80fd6cdCalifornia State AGfiled 2025-10-15(57d gap)Verified by operator
- bd_f7b2fef6a5a68d49California State AGfiled 2025-10-01(71d gap)Verified by operator
- bd_9fdbc50e284e387eCalifornia State AGfiled 2025-09-22(80d gap)Verified by operator
Show 6 more filings ↓Show fewer ↑up to 188d gap
- bd_1b92ab769d91dc2aCalifornia State AGfiled 2025-09-11(91d gap)Verified by operator
- bd_00920f0067d5e69dCalifornia State AGfiled 2025-07-31(133d gap)Verified
- bd_95baeb3422bb54e2Montana State AGfiled 2025-07-31(133d gap)Verified
- bd_b89e0c880448cf1bCalifornia State AGfiled 2025-07-11(153d gap)Verified
- bd_61b844bea6eb84e8Oregon State AGfiled 2025-06-06(188d gap)Candidate
- bd_63544f6aac5ae4a4Washington State AGfiled 2025-06-06(188d gap)Verified
Showing first 10 of 13 linked disclosures.
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 11, 2025
- Raw hash
- f86dd8ba41a1d4398ccc2fcefcecde18a28f65eca5c0d0a7aa44b7f93ebef80d
Reporting entity
- Name
- EpiSourcenorm: episource
Victim entity
- Name
- EpiSourcenorm: episource
Incident
- Discovered
- Feb 6, 2025
- Materiality determined
- —
- Notification sent
- Nov 12, 2025
- Affected individuals
- 6,584,876
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 44 weeks(308 days from discovery to filing)
- Compliance flags
- OR AG >45d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.