Medsurant Holdings, LLC
bd_cdffc9b5517e1fd1 · schema v1 · pii pii-v1
Full breach record for Medsurant Holdings, LLC →2 incidents on fileMedsurant Holdings, LLC experienced unauthorized access to its systems between September 23 and September 30, 2021, with a secondary limited access event on November 12, 2021. An unknown actor exfiltrated data, including patient information, and encrypted limited data during the second event. The company discovered the incident on September 30, 2021, after receiving a suspicious email. Affected data includes names, addresses, and potentially PHI. Medsurant engaged forensic investigators, notified law enforcement and HHS, and is offering 24 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 23, 2021
Begins
Sep 30, 2021
Discovered
Mar 25, 2022
Filed
vs. sector median
+13 wks slower
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Indiana State AGbd_d7d3c83e8e3b408a2022-03-25Verified
- Montana State AGbd_f7bbed94b59f6f6a2022-03-25Verified
- Illinois State AGbd_1dea62a2b1f475232022-01-01 · +83dCandidate
- Illinois State AGbd_f0108592a796f74f2022-01-01 · +83dVerified
Filing propagation · 5 filings · 4 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Mar 25 (CA) — a 83-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.