DisclosureLens
GLOBALUnknownRansomwareQilinLow

Cardiovascular Consultants Ltd.

bd_b15eb8ada70df30e · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 29, 2023

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

60%
Full breach record for Cardiovascular Consultants Ltd. →3 incidents on file

Press / market disclosure — not a breach-notification filing

A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.

SEC Filing. Cardiovascular Consultants, Ltd. (CVC): On September 29, 2023, Cardiovascular Consultants, a U.S. subsidiary of Fresenius Medical Care AG, identified a security breach affecting certain IT systems. Data was encrypted and stolen by an intruder, impacting electronic medical records and the data warehouse, potentially affecting approximately 500,000 patients, former patients, guarantors, and 200 employees. A firm was engaged to notify patients, provide call center services, and monitor the credit of affected individuals. An investigation into the impact on another subsidiary, Fresenius Vascular Care, Inc., is ongoing. Linked ransomware group: qilin.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Sep 29, 2023

Press report

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Attack → press

—

Compliance clock

Not assessable

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 2 states

View merged incident ↗
PressSep 29 · first · this page
HHS OCR+63d
Massachusetts State AG+66d

Pattern: first filing Sep 29, last Dec 4 (MA) — a 66-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

  • incident type + narrative only (may be machine-translated)
  • discovery date
  • materiality
  • affected count
  • data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2022-10-08

qilin

According to ransomware.live, Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.

2,435 tracked hereFull profile →