HackingHealthcareHealthcareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Texas Centers for Infectious Disease Associates

bd_e693a39559634860 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 19, 2024

Filed

Jun 26, 2025

To disclose

—

Affected

5state residents only

Linked

8 records

Confidence

67%

Full breach record for Texas Centers for Infectious Disease Associates →2 incidents on file

Texas Centers for Infectious Disease Associates (TCIDA) notified the Nebraska Attorney General on June 30, 2025, of a data security incident involving a third-party billing vendor. Discovered on July 19, 2024, the incident potentially exposed personal and health information of approximately 5 Nebraska residents, including SSNs, DOBs, and medical data. TCIDA engaged forensic experts, notified the FBI, and provided identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 19, 2024

Discovered

Jun 26, 2025

Filed

This filing is one of 8 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebianlianbd_2a3468da7aa2982c2024-07-19 · +342dVerified by operator

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_7b4685cd6cce0dcb2025-06-26Verified
New Hampshire State AGbd_f24ff419e5b04a9e2025-06-26Verified
Maine State AGbd_139136c8292b3dfa2025-06-30 · +4dVerified
HHS OCRbd_e72fc5733339e5cd2025-06-30 · +4dVerified by operator

Show 2 more filings ↓up to 5d gap

Massachusetts State AGbd_09372984cb2cbc722025-07-01 · +5dVerified by operator
Texas State AGbd_c1fa1f02a59b1f312025-07-01 · +5dVerified

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: Texas Centers for Infectious Disease Associates
norm: texas centers for infectious disease associates
Domain: texascentersid.com
Industry: healthcare
Industry: Healthcarellm

Discovered: Jul 19, 2024
Materiality determined: —
Notification sent: Jun 26, 2025
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: Partner
Regulator citations: Notified the Federal Bureau of Investigation
Initial access: supply_chain

During the incident: Took steps to secure its environment and enlisted the assistance of outside experts to conduct an investigation
Launched a comprehensive review of the potentially affected data
Implemented additional safeguards to help ensure the security of its systems
Providing those whose Social Security number was involved with identity protection services through IDX
Established a toll-free call center through IDX
Notified the Federal Bureau of Investigation of the incident
Changes made: Implemented additional safeguards to help ensure the security of its systems and to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Indiana State AGJun 26 · first

New Hampshire State AGJun 26 · first

Nebraska State AGJun 26 · first · this page

Maine State AG+4d

HHS OCR+4d

Massachusetts State AG+5d

Texas State AG+5d

Pattern: first filing Jun 26 (IN), last Jul 1 (TX) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/7f4dedfa-9099-4b2e-8bb6-06e1f85b1b8f.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2025
Raw hash: 1ef4068838f73558cd7ced08f176f77af93ab4d919bb2f06ef01feb519f197bf

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityTexas Centers for Infectious Disease Associates

Incidentdiscovered Jul 19, 2024

Stated responseTook steps to secure its environment and enlisted the assistance of outside experts to conduct an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov