UnknownGovernment IDFinancial accountMedium

Cardiovascular Associates Holdings, LP

bd_a91006042cd09d5c · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 3, 2023

To disclose

—

Affected

188state residents only

Linked

10 filings

Confidence

95%

Full breach record for Cardiovascular Associates Holdings, LP →

Cardiovascular Associates reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-02-03. 188 Massachusetts residents were affected. The report records the breach type as electronic.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA credit monitoring due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Feb 3, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

California State AGbd_3101fb359642d7d32023-02-03Verified
Vermont State AGbd_489906bb2eebc73f2023-02-03Verified
HHS OCRbd_b0c6fa9187e34f262023-02-03Verified
Montana State AGbd_bfd43f9919ac6f722023-02-03Verified

Show 5 more filings ↓up to 42d gap

South Carolina State AGbd_f4f1c65f262f28192023-02-03Verified
New Hampshire State AGbd_cd85f8eca68034242023-02-06 · +3dVerified
Indiana State AGbd_1846d59f2e2287b92023-03-17 · +42dVerified
California State AGbd_1e18382a04b09a262023-03-17 · +42dVerified
Maine State AGbd_c613160ae6c07cfd2023-03-17 · +42dVerified

Name: Cardiovascular Associates Holdings, LP
norm: cardiovascular associates

Name: Cardiovascular Associates Holdings, LP
norm: cardiovascular associates

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 188state-resident count only
Data types: Government IDFinancial account
Data elements: Social Security numberFinancial account numberDriver's licence number
Stated not affected: Payment card number
The filing states these were not involved. Categories absent from both lists were not addressed either way.
Attack vector: Unknown

Compliance flags: MA credit monitoring due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

California State AGFeb 3 · first

Vermont State AGFeb 3 · first

HHS OCRFeb 3 · first

Montana State AGFeb 3 · first

South Carolina State AGFeb 3 · first

Massachusetts State AGFeb 3 · first · this page

New Hampshire State AG+3d

Indiana State AG+42d

California State AG+42d

Maine State AG+42d

Pattern: first filing Feb 3 (CA), last Mar 17 (ME) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/data-breach-report-2023/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 3, 2023
Raw hash: bf3dc85d37c5a037910818c8cd95be1f07ff57f53859e273a856582c6acf55d0

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityCardiovascular Associates Holdings, LP

Victim entityCardiovascular Associates Holdings, LP

IncidentUnknown

ComplianceMA credit monitoring due

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov