HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICPIILowContained
Alexion Pharmaceuticals, Inc
bd_b5ba8c627114462d · schema v1 · pii pii-v1
Full breach record for Alexion Pharmaceuticals, Inc →Alexion Pharmaceuticals, Inc. notified Vermont AG that an unauthorized third party accessed a database belonging to vendor Cisiv Ltd. (subcontractor to PPD) on Feb 8, 2024. The incident exposed names, addresses, emails, phone numbers, and survey participation data of individuals in the REMS program. Cisiv contained the breach on Feb 12 and engaged forensic consultants. Alexion offered one year of Kroll identity monitoring.
Vermont clock✗ VT AG >45 bday13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8242008907559439Montana State AGfiled 2024-05-13(1d gap)Candidate
- bd_4711cf0754c3e6deIndiana State AGfiled 2024-05-20(6d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-05-14-alexion-pharmaceuticals-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 14, 2024
- Raw hash
- e4bb62389154714732b15fe66dad6987cdcc84d170afddc63a87f63997a21c37
Reporting entity
- Name
- Alexion Pharmaceuticals, Incnorm: alexion pharmaceuticals
Victim entity
- Name
- Alexion Pharmaceuticals, Incnorm: alexion pharmaceuticals
Incident
- Discovered
- Feb 12, 2024
- Materiality determined
- —
- Notification sent
- May 14, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Initial access
- supply_chain
Compliance
- Time to disclose
- 13 weeks(92 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.