Social EngineeringHealthcareManufacturingManufacturingPhishingStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDPIIHighContained

Travere Therapeutics, Inc

bd_c633c8968b381b57 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 19, 2025

Filed

Oct 27, 2025

To disclose

19 weeks

Affected

3state residents only

Linked

4 filings

Confidence

66%

Full breach record for Travere Therapeutics, Inc →

Travere Therapeutics notified the NH AG of a phishing incident where an unauthorized third party accessed an employee email account on June 17, 2025. The attacker accessed personal information of 3 NH residents (names, DOB, SSN, address, phone). Notification was sent on Oct 20, 2025, offering 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 19 weeks / 130 days

Jun 17, 2025

Begins

Jun 19, 2025

Discovered

Oct 27, 2025

Filed

vs. sector median

+10 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_a62d4dee7a2ba12d2025-10-24 · +3dVerified
Nebraska State AGbd_b2319a670a9019382025-10-20 · +7dVerified
Indiana State AGbd_d36e8d9baf1880922025-10-20 · +7dCandidate

Name: Travere Therapeutics, Inc
norm: travere therapeutics

Name: Travere Therapeutics, Inc
norm: travere therapeutics
Industry: Healthcarenaics mapManufacturingnaics map

Discovered: Jun 19, 2025
Breach occurred: Jun 17, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 20, 2025
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: phishing_link

During the incident: Undertook a thorough investigation into what had happened with the assistance of third-party cybersecurity forensic specialists
MSP successfully evicted the unauthorized third party from its information systems
Notified impacted individuals
Offered 24 months of free credit monitoring and identity theft protection services through Epiq
Changes made: Offered 24 months of identity protection services and credit monitoring from Epiq
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(130 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Nebraska State AGOct 20 · first

Indiana State AGOct 20 · first

Massachusetts State AG+4d

New Hampshire State AG+7d · this page

Pattern: first filing Oct 20 (NE), last Oct 27 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/travere-therapeutics-20251027.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 27, 2025
Raw hash: 33d8e7f3686d11f4d9aee4c9d7ceb9b87a34dee7aeb3ebf98bb0e63d2fcd2809

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityTravere Therapeutics, Inc

Victim entityTravere Therapeutics, Inc

Incidentdiscovered Jun 19, 2025

Stated responseUndertook a thorough investigation into what had happened with the assistance of third-party cybersecurity forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov