HackingPIIIdentity (basic)LowContained

Medical Oncology Hematology Consultants, P.A.

bd_d8e6325f69d84a82 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 12, 2026

Filed

May 1, 2026

To disclose

11 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for Medical Oncology Hematology Consultants, P.A. →3 incidents on file

Hematology Oncology Consultants reported a cybersecurity attack on February 12, 2026, involving unauthorized acquisition of files containing personally-identifiable information. The breach affected patient data including names. The company notified affected individuals by April 7, 2026, and implemented environment hardening measures.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d11 weeks discovery → filing

Incident timeline

discovery → filing · 11 weeks / 78 days

Feb 12, 2026

Begins

Feb 12, 2026

Discovered

May 1, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

A leak claim by rhysida about this victim predates this filing by 223 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siterhysidabd_48da52597f13bd152025-10-17 · +195dVerified by operator
Leak Siterhysidabd_46e41800cd5f36a82025-09-20 · +223dVerified by operator

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_996ebc1f9fbd4c3c2026-04-30 · +1dVerified
HHS OCRbd_2e0638d56653ed152026-04-24 · +7dVerified by operator

Name: Medical Oncology Hematology Consultants, P.A.
norm: medical oncology hematology consultants

Name: Medical Oncology Hematology Consultants, P.A.
norm: medical oncology hematology consultants

Discovered: Feb 12, 2026
Breach occurred: Feb 12, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 7, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took steps to locate updated address information to notify you as quickly as possible
Implemented additional measures to further harden our environment and reduce the likelihood of a similar event occurring in the future
Notified potentially impacted individuals
Changes made: Implemented additional measures to further harden our environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(78 days from discovery to filing)
Compliance flags: Leak >180dMA AG >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

HHS OCRApr 24 · first

New Hampshire State AG+6d

Massachusetts State AG+7d · this page

Pattern: first filing Apr 24 (MI), last May 1 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-676-hematology-oncology-consultants/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 1, 2026
Raw hash: 26d56abda43413a9fea16396aa20a26cd1b4ba85caad8d38a386196d1f4b7d1d

Linked disclosures

Ransomware claims (2)

Regulatory filings (2) · sorted by filing gap

Reporting entityMedical Oncology Hematology Consultants, P.A.

Victim entityMedical Oncology Hematology Consultants, P.A.

Incidentdiscovered Feb 12, 2026

Stated responseTook steps to locate updated address information to notify you as quickly as possible

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov