Advarra Holdings, Inc.
bd_e82548c2a9be0b01 · schema v1 · pii pii-v1
Full breach record for Advarra Holdings, Inc. →2 incidents on fileAdvarra, Inc. notified the NH Attorney General of a cybersecurity incident where an unauthorized third party accessed an employee account via SIM swapping on Oct 25, 2023. The attacker exfiltrated HR data, including PII of approximately 7 NH residents. Advarra contained the incident on Oct 26, 2023, engaged forensic experts, notified law enforcement, and provided credit monitoring. SMS MFA was disabled as a remediation measure.
J jump to incidentP pin to compareR raw source
Incident timeline
Oct 25, 2023
Begins
Oct 26, 2023
Discovered
Feb 16, 2024
Filed
vs. sector median
3 wks faster
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Maine State AGbd_ea2f8733890384442024-02-14 · +2dVerified
- Massachusetts State AGbd_accdc095d5442ea62024-02-23 · +7dVerified
- Washington State AGbd_4934335b0ebda8b72024-02-02 · +14dVerified
- Montana State AGbd_039c7a9ed847de132023-12-20 · +58dVerified
Show 1 more filing ↓Show fewer ↑up to 73d gap
- Maine State AGbd_7767daae2ddb29992023-12-05 · +73dCandidate
Filing propagation · 6 filings · 5 states
View merged incident ↗Pattern: first filing Dec 5 (ME), last Feb 23 (MA) — a 80-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.