Therapeutic Health Services
bd_e1adf1aa131ed487 · schema v1 · pii pii-v1
Full breach record for Therapeutic Health Services →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Hunters International on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Mar 19, 2024
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- Washington State AGbd_f491b2810a3b9c5c2024-07-11 · +113dVerified
- Vermont State AGbd_3160e87da8cd14602024-07-18 · +120dVerified by operator
- Montana State AGbd_793062f3ad804d272024-07-18 · +120dVerified
- Maine State AGbd_0b0839c7602e26eb2024-07-19 · +121dVerified by operator
Show 6 more filings ↓Show fewer ↑up to 225d gap
- Massachusetts State AGbd_76c95b587b2d6ea42024-07-19 · +121dVerified by operator
- Indiana State AGbd_9f2b9b64c727f93a2024-07-19 · +121dVerified by operator
- California State AGbd_db7590df7889e1192024-07-19 · +121dVerified by operator
- New Hampshire State AGbd_5fa83b73c13ad3b92024-07-23 · +125dVerified by operator
- New Hampshire State AGbd_ed78a3330b539efb2024-10-30 · +224dVerified
- Oregon State AGbd_1e7c1a6bf43c0ed92024-10-31 · +225dVerified by operator
Showing first 10 of 11 linked disclosures.
Filing propagation · 10 filings · 9 states
View merged incident ↗Pattern: first filing Jul 11 (WA), last Oct 31 (OR) — a 112-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.