HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedPIIPHIIdentity (basic)Health (basic)LowContained

Tri-Cities Gastroenterology

bd_cac7c215724291e0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 22, 2026

Filed

Apr 29, 2026

To disclose

7 days

Affected

4state residents only

Linked

7 records

Confidence

66%

Full breach record for Tri-Cities Gastroenterology →

Tri-Cities Gastroenterology experienced a data security incident on December 11, 2025, where an unauthorized party accessed its network and exfiltrated files containing personal information, including full names and potentially health-related data. The organization contained the threat and engaged external cybersecurity professionals. A forensic investigation concluded on April 22, 2026, that the exfiltrated files contained some individuals' personal information. The company is offering complimentary Experian IdentityWorks membership to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d7 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 132 days

discovery → filing · 7 days

Dec 11, 2025

Begins

Apr 22, 2026

Discovered

Apr 29, 2026

Filed

vs. sector median

8 wks faster

This filing is one of 7 records about the same incident.View merged incident

A leak claim by insomnia about this victim was first seen 81 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteinsomniabd_7373448b589b92d52025-12-16 · +134dVerified by operator

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_32600c4fb741dbc82026-04-29Verified
HHS OCRbd_475ee536d9579f552026-04-29Verified
Indiana State AGbd_629c738b1cb1f5792026-04-29Candidate
Indiana State AGbd_a82db350d6c28ec82026-04-29Verified

Show 1 more filing ↓

Nebraska State AGbd_ffa1e04e1b5c3ca92026-04-29Verified

Name: Tri-Cities Gastroenterology
norm: tri cities gastroenterology
Domain: digestivewellness.net

Name: Tri-Cities Gastroenterology
norm: tri cities gastroenterology
Domain: digestivewellness.net
Industry: Healthcarellm

Discovered: Apr 22, 2026
Breach occurred: Dec 11, 2025
Undetected for: 132 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: PIIPHIIdentity (basic)Health (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Contained the threat
Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals experienced in handling these types of incidents
Conducted a thorough forensic investigation
Offering complimentary membership of Experian IdentityWorks
Changes made: Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: Leak >30dClock withheld · confirmation date

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Vermont State AGApr 29 · first

HHS OCRApr 29 · first

Indiana State AGApr 29 · first

Nebraska State AGApr 29 · first

Massachusetts State AGApr 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-663-tri-cities-gastroenterology/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 29, 2026
Raw hash: b2b793f1414d082e87578bc49ef8443d177859daad644657d0124e2d12d18458

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityTri-Cities Gastroenterology

Victim entityTri-Cities Gastroenterology

Incidentdiscovered Apr 22, 2026

Stated responseContained the threat

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov