DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Health (basic)LowContained

Symphonix Health

bd_b27aaea900f94158 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 6, 2016

Filed

Aug 19, 2016

To disclose

6 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

66%
Full breach record for Symphonix Health →

Newkirk Products, Inc., a service provider for Symphonix Health, experienced unauthorized access to a server containing member information on May 21, 2016. The incident was discovered on July 6, 2016. Affected data included names, addresses, dates of birth, and plan details, but excluded SSNs, financial, and medical records. Newkirk shut down the server, engaged forensic investigators, and offered identity protection services.

California clockDiscovered Jul 6, 2016 → Notified Aug 1, 201626d ✓ CA 60-day OK6 weeks discovery → filing

Incident timeline

undetected · 46 days
discovery → filing · 6 weeks / 44 days

May 21, 2016

Begins

Jul 6, 2016

Discovered

Aug 19, 2016

Filed

vs. sector median

5 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 4 states

View merged incident ↗
HHS OCRAug 9 · first
Oregon State AG+8d
California State AG+9d
Montana State AG+10d
California State AG+10d · this page

Pattern: first filing Aug 9 (NY), last Aug 19 (CA) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.