Clinical Registry Solutions
bd_b568d92392350290 · schema v1 · pii pii-v1
Full breach record for Clinical Registry Solutions →Clinical Registry Solutions, a data abstraction company assisting hospitals with medical registry reporting, experienced unauthorized access to its network on April 9, 2026. The company discovered a network disruption on that date, took systems offline, and retained cybersecurity specialists. Investigation revealed that certain files containing patient information, including protected health information (PHI) and personal data, may have been taken from the network. CRS reset passwords, implemented additional security measures, and reported the incident to federal law enforcement. No evidence of misuse was found.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 9, 2026
Begins
Apr 9, 2026
Discovered
Jul 29, 2026
Filed
vs. sector median
+4 wks slower
Linked disclosures
Why this link?Ransomware claims (2)
- Leak Siteakirabd_f828cc6ad7ec7ecc2026-05-06 · +84dVerified by operator
- Leak Siteakirabd_401d01df51fe3e5f2026-04-09 · +111dVerified by operator
Regulatory filings (7) · sorted by filing gap
- California State AGbd_84ea03610972f25d2026-07-29Verified by operator
- Massachusetts State AGbd_769d7856f7ce42202026-06-25 · +34dVerified by operator
- Nebraska State AGbd_3dde56a6b54fc5f22026-06-17 · +42dVerified by operator
- Indiana State AGbd_8e3980e02c3b30f22026-06-17 · +42dVerified
Show 3 more filings ↓Show fewer ↑up to 48d gap
- HHS OCRbd_fe5df6567cc5082d2026-06-12 · +47dVerified
- California State AGbd_cf661af5a4e58e572026-06-11 · +48dVerified
- New Hampshire State AGbd_f331216109245cf42026-06-11 · +48dVerified
Filing propagation · 8 filings · 6 states
View merged incident ↗Pattern: first filing Jun 11 (CA), last Jul 29 (CA) — a 48-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.