HackingHealthcareProfessional ServicesHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)LowContained

The Health Trust

bd_e0d4d9edfcbd5898 · schema v1 · pii pii-v2

Severity

Low

Discovered

May 26, 2025

Filed

Aug 21, 2026

To disclose

15 months

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for The Health Trust →2 incidents on file

The Health Trust identified suspicious network activity on May 26, 2025, and again on June 11, 2025. Investigation revealed an unknown external actor accessed systems prior to March 26, 2025, and between June 8-11, 2025, copying information including names. The incident involved data held by third-party provider FASS. The organization secured systems, engaged law enforcement, and is offering credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered May 26, 2025 → Notified Aug 24, 2026455d ✗ CA 60-day late15 months discovery → filing

Incident timeline

undetected · 61 days

discovery → filing · 15 months / 452 days

Mar 26, 2025

Begins

May 26, 2025

Discovered

Aug 21, 2026

Filed

vs. sector median

+54 wks slower

This filing is one of 2 about the same incident.View merged incident

A leak claim by qilin about this victim predates this filing by 442 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Vermont State AGbd_62540cd08d26ec7d2026-08-26 · +5dVerified

Name: The Health Trust
norm: the health
Domain: healthtrust.org

Name: The Health Trust
norm: the health
Domain: healthtrust.org
Industry: HealthcarellmProfessional Servicesllm

Discovered: May 26, 2025
Breach occurred: Mar 26, 2025 – Jun 11, 2025
Undetected for: 61 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 24, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notifying relevant regulators, as required
Third party: via Financial Administrative Support Services (FASS)

During the incident: Took steps to secure our network and restore our systems
Brought our systems offline to ensure their security
Launched an investigation
Reported this event to law enforcement
Notifying relevant regulators
Changes made: Reviewing our internal policies, procedures, and security tools to reduce the risk of a similar event from occurring in the future
Offering access to 12/24 months of complimentary credit monitoring through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(452 days from discovery to filing)
Compliance flags: CA 60-day late · 455dLeak >180dCA AG copy ≤15d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: May 26, 2025
→ Notified: Aug 24, 2026
455d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
California
Consumers notified: Aug 24, 2026
→ AG copy submitted: Aug 21, 2026
— 15 calendar days CA AG copy ≤15d

Statute	Window	Elapsed	Threshold	Status
California	Discovered: May 26, 2025 → Notified: Aug 24, 2026	455d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late
California	Consumers notified: Aug 24, 2026 → AG copy submitted: Aug 21, 2026	—	15 calendar days	CA AG copy ≤15d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGAug 21 · first · this page

Vermont State AG+5d

Pattern: first filing Aug 21 (CA), last Aug 26 (VT) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-628727
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 21, 2026
Raw hash: db3b76b268305f95398da0be4cc32f2c40e6aad504482ea9d79c1c03313a1917

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThe Health Trust

Victim entityThe Health Trust

Incidentdiscovered May 26, 2025

Stated responseTook steps to secure our network and restore our systems

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov