Social EngineeringHealthcareHealthcarePhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)CredentialsLowContained

OsteoRemedies, LLC

bd_cb5fdb8e04a4c9ea · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 9, 2024

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

68%

Full breach record for OsteoRemedies, LLC →2 incidents on file

OsteoRemedies, LLC notified consumers of a phishing incident where an employee's email account was compromised. The attacker likely accessed emails and attachments containing names and other personal data. OsteoRemedies secured the account, engaged forensic investigators, and offered one year of Experian IdentityWorks to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Oct 9, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_1f178e2872a4a73e2024-10-07 · +2dVerified
New Hampshire State AGbd_c8c74451adaad7672024-10-07 · +2dVerified
Indiana State AGbd_9d22460532dabcd32024-10-02 · +7dVerified

Name: OsteoRemedies, LLC
norm: osteoremedies

Name: OsteoRemedies, LLC
norm: osteoremedies
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Oct 9, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Credentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Secured the employee’s account
Launched an investigation with the assistance of a third-party forensic investigation firm
Conducted a manual review of the contents of the employee’s mailbox
Offering a complimentary one-year membership to Experian®’s IdentityWorksSM
Changes made: Implemented, and will continue to adopt, additional safeguards and technical security measures to further protect and monitor our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGOct 2 · first

Massachusetts State AG+5d

New Hampshire State AG+5d

Vermont State AG+7d · this page

Pattern: first filing Oct 2 (IN), last Oct 9 (VT) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-10-09-osteoremedies-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 9, 2024
Raw hash: cc78e397ffd56e9592367c37bd84a5be95ad580e7692fde0707eb895f318b450

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityOsteoRemedies, LLC

Victim entityOsteoRemedies, LLC

IncidentPhishing

Stated responseSecured the employee’s account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov