DisclosureLens
UnknownHealthcareTechnologyHealthcareCustomer Data InvolvedData ExfiltratedPHIHealth (basic)Identity (basic)LowContained

Arbor Associates Inc

bd_d13f3fd45725847a · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 17, 2025

Filed

Jul 3, 2025

To disclose

11 weeks

Affected

Not disclosed

Linked

11 filings

Confidence

64%
Full breach record for Arbor Associates Inc

Arbor Associates, Inc. notified the California Attorney General of a data security incident where unauthorized access occurred between April 15 and April 17, 2025. The company became aware of unusual network activity on April 17, 2025. Affected data may include names, contact info, age, sex, DOB, service dates, CPT/diagnosis codes, medical record numbers, insurance names, and doctor names. Arbor engaged cybersecurity experts and implemented security enhancements.

Incident timeline

undetected · 2 days
discovery → filing · 11 weeks / 77 days

Apr 15, 2025

Begins

Apr 17, 2025

Discovered

Jul 3, 2025

Filed

vs. sector median

1 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filingsup to 40d gap

Filing propagation · 11 filings · 9 states

View merged incident ↗

Pattern: first filing Jul 1 (IL), last Aug 12 (TX) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.