DisclosureLens
HackingHealthcareHealthcareStolen CredentialsData ExfiltratedData PublishedTargetedPHIIdentity (basic)Government IDHighContained

Heart South Cardiovascular Group

bd_dc4e83aef803c891 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 12, 2026

Filed

Apr 6, 2026

To disclose

8 weeks

Affected · nationwide

46,6663 in this filing

Linked

5 filings

Confidence

65%
Full breach record for Heart South Cardiovascular Group →4 incidents on file

Heart South Cardiovascular Group, PC reported an unauthorized access incident on November 11, 2025, where a bad actor claimed to possess data and posted limited data on the dark web. The investigation found no evidence of network access or data theft, but confirmed patient PHI was stored on affected systems. 46,666 individuals were notified, including 3 Maine residents. Identity monitoring services were offered.

Maine clockDiscovered Feb 12, 2026 → Filed with AG Apr 6, 202653d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 93 days
discovery → filing · 8 weeks / 53 days

Nov 11, 2025

Begins

Feb 12, 2026

Discovered

Apr 6, 2026

Filed

vs. sector median

5 wks faster

This filing is one of 5 about the same incident.View merged incident
A leak claim by rhysida about this victim predates this filing by 146 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
HHS OCRApr 6 · first
Nebraska State AGApr 6 · first
Maine State AGApr 6 · first · this page
New Hampshire State AG+7d

Pattern: first filing Apr 6 (AL), last Apr 13 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.