MalwareOtherRansomwareRansom DemandedData EncryptedDelayed DiscoveryMedium

Telecare Health

bd_ef43c1511af17dbc · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jan 25, 2026

Filed

Nov 9, 2026

To disclose

41 weeks

Affected

19,922state residents only

Confidence

95%

Full breach record for Telecare Health →

Telecare Health, a health sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2026-01-25 and filed notice on 2026-11-09. 19,922 Washington residents were affected. 288 days elapsed between awareness and notification. 0 days to identify the breach. 0 days to contain the breach.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d41 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

discovery → filing · 41 weeks / 288 days

Jan 25, 2026

Discovered

Nov 9, 2026

Filed

vs. sector median

+35 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed19,922 affectedView incident

Name: Telecare Health
norm: telecare health

Name: Telecare Health
norm: telecare health
Industry: Otherllm

Discovered: Jan 25, 2026
Materiality determined: —
Notification sent: —
Affected individuals: 19,922state-resident count only
Data types: —
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
Threat actor: ExternalFinancial

Time to disclose: 41 weeks(288 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://data.wa.gov/resource/sb4j-ca4h.json?id=26198
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 9, 2026
Raw hash: 0cc3a3a6df183104e04d9050cc1b71df1344daf637c673834484bd95e5031fad

Reporting entityTelecare Health

Victim entityTelecare Health

Incidentdiscovered Jan 25, 2026

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenancedata.wa.gov