DisclosureLens
HackingProfessional ServicesHealthcareProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDPHIHealth (basic)MediumContained

River City Data

bd_c1ab7d9f98922e12 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Feb 2, 2026

Filed

Aug 1, 2026

To disclose

Affected

Not disclosed

Confidence

66%
Full breach record for River City Data

River City Data, a provider of scanning and document management services to healthcare providers, experienced a cybersecurity incident. An unauthorized actor gained access to the company's environment between November 17, 2025, and January 15, 2026. The company became aware of the incident on February 2, 2026. Affected data may include names, dates of birth, addresses, Social Security numbers, health insurance information, medical record numbers, and health information such as diagnoses and treatments. The company took systems offline, engaged external cybersecurity experts, and reported the incident to law enforcement. Identity monitoring services are being offered to affected individuals.

Incident timeline

undetected · 77 days

Nov 17, 2025

Begins

Feb 2, 2026

Discovered

Aug 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.