DisclosureLens
UnknownHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

Bone & Joint Clinic, S.C.

bd_abfe4c8408c67439 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 16, 2023

Filed

Mar 7, 2023

To disclose

7 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

67%
Full breach record for Bone & Joint Clinic, S.C.

Bone & Joint Clinic, S.C. notified consumers of a data security incident discovered on January 16, 2023. The investigation determined that administrative and medical files may have been acquired without authorization. Affected data may include names, dates of birth, Social Security numbers, addresses, phone numbers, health insurance information, and diagnosis/treatment details. The company engaged cybersecurity experts, notified the FBI, and offered credit monitoring services.

Vermont clock VT AG >14 bday7 weeks discovery → filing

Incident timeline

discovery → filing · 7 weeks / 50 days

Jan 16, 2023

Discovered

Mar 7, 2023

Filed

vs. sector median

5 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Show 2 more filingsup to 13d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗
Indiana State AGMar 7 · first
Vermont State AGMar 7 · first · this page

Pattern: first filing Mar 7 (IN), last Mar 20 (MA) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.