CareTree
bd_ab9056e59a633901 · schema v1 · pii pii-v1
Full breach record for CareTree →CareTree, Inc., a third-party vendor, reported a data breach caused by a hacking incident. The breach was discovered on October 13, 2023, and is believed to have occurred on July 21, 2023. The incident resulted in the compromise of names and financial account details. CareTree notified affected individuals on December 11, 2023, and offered one year of credit monitoring and identity theft insurance services through Epiq.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 21, 2023
Begins
Oct 13, 2023
Discovered
Dec 11, 2023
Filed
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- California State AGbd_727e34824e5007c92023-12-11Verified
- New Hampshire State AGbd_1f0e8136404e11ce2023-12-08 · +3dVerified
- Montana State AGbd_446a50c00a9569582023-12-27 · +16dVerified
- New Hampshire State AGbd_44a69674e55b338c2023-12-27 · +16dVerified
Show 5 more filings ↓Show fewer ↑up to 65d gap
- Vermont State AGbd_d3e5a7ef13ce1b8b2023-12-27 · +16dVerified
- HHS OCRbd_339db28c04eef7152023-11-15 · +26dVerified
- Massachusetts State AGbd_66b93c3a19a3219e2023-11-15 · +26dVerified
- New Hampshire State AGbd_97d6f0b94f2157582024-01-12 · +32dVerified
- California State AGbd_b0b9e4947aa838c92024-02-14 · +65dVerified
Filing propagation · 10 filings · 7 states
View merged incident ↗Pattern: first filing Nov 15 (IL), last Feb 14 (CA) — a 91-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.