DisclosureLens
HackingFinancial ServicesTechnologyFinanceStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Solutran

bd_efbdb1fc019f7ae0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 15, 2023

Filed

May 12, 2023

To disclose

12 weeks

Affected

12state residents only

Linked

5 filings

Confidence

66%
All records for Solutran →2 incidents on file

Account takeover notice

Solutran notified members of unauthorized access to their accounts. The filing says: “On February 19, 2023, Solutran confirmed that your Healthy Benefits account had been accessed by this unauthorized third party using your login credentials.”

Solutran, a subsidiary of Optum Financial Services, disclosed unauthorized access to Healthy Benefits web portals in January 2023. An unknown third party used valid login credentials to access member accounts, exposing PII (name, DOB, address, phone) and financial data (prepaid card numbers, security codes). The incident was contained by March 2023 through password resets and security enhancements.

Incident timeline

undetected · 33 days
discovery → filing · 12 weeks / 86 days

Jan 13, 2023

Begins

Feb 15, 2023

Discovered

May 12, 2023

Filed

vs. sector median

+4 wks slower

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGApr 11 · first
Montana State AG+31d · this page

Pattern: first filing Apr 11 (IN), last May 12 (MT) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.