HackingHealthcareHealthcareSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Texas Centers for Infectious Disease Associates

bd_f24ff419e5b04a9e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 19, 2024

Filed

Jun 26, 2025

To disclose

49 weeks

Affected

1state residents only

Linked

9 filings

Confidence

66%

Full breach record for Texas Centers for Infectious Disease Associates →2 incidents on file

Texas Centers for Infectious Disease Associates (TCIDA) notified the New Hampshire Attorney General on June 26, 2025, of a data security incident affecting 1 NH resident. TCIDA detected unusual network activity on July 19, 2024, which was linked to a compromise of a former third-party billing vendor. The incident may have exposed names, SSNs, DOBs, driver's license numbers, and medical/insurance information. TCIDA engaged forensic experts, notified the FBI, and provided identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d49 weeks discovery → filing

Incident timeline

discovery → filing · 49 weeks / 342 days

Jul 19, 2024

Discovered

Jun 17, 2025

Scope determined

Jun 26, 2025

Filed

vs. sector median

+38 wks slower

This filing is one of 9 about the same incident.View merged incident

A leak claim by bianlian about this victim predates this filing by 342 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitebianlianbd_895aee4823c3f4652024-08-14 · +316dVerified by operator
Leak Sitebianlianbd_2a3468da7aa2982c2024-07-19 · +342dVerified by operator

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_7b4685cd6cce0dcb2025-06-26Verified
Nebraska State AGbd_e693a395596348602025-06-26Verified by operator
Maine State AGbd_139136c8292b3dfa2025-06-30 · +4dVerified
HHS OCRbd_e72fc5733339e5cd2025-06-30 · +4dVerified by operator

Show 2 more filings ↓up to 5d gap

Massachusetts State AGbd_09372984cb2cbc722025-07-01 · +5dVerified by operator
Texas State AGbd_c1fa1f02a59b1f312025-07-01 · +5dVerified

Name: Texas Centers for Infectious Disease Associates
norm: texas centers for infectious disease associates
Domain: texascentersid.com

Name: Texas Centers for Infectious Disease Associates
norm: texas centers for infectious disease associates
Domain: texascentersid.com
Industry: Healthcarellm

Discovered: Jul 19, 2024
Materiality determined: Jun 17, 2025
Notification sent: Jun 26, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation of the incident and will provide whatever cooperation is necessary to hold the perpetrators accountable
Initial access: supply_chain

During the incident: Took steps to secure its environment and enlisted the assistance of outside experts to conduct an investigation
Launched a comprehensive review of the potentially affected data
Implemented additional safeguards to help ensure the security of its systems
Providing those whose Social Security number was involved with identity protection services through IDX
Established a toll-free call center through IDX
Notified the Federal Bureau of Investigation of the incident
Changes made: Implemented additional safeguards to help ensure the security of its systems and to reduce the risk of a similar incident occurring in the future
Implemented additional security measures to help reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 49 weeks(342 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Indiana State AGJun 26 · first

Nebraska State AGJun 26 · first

New Hampshire State AGJun 26 · first · this page

Maine State AG+4d

HHS OCR+4d

Massachusetts State AG+5d

Texas State AG+5d

Pattern: first filing Jun 26 (IN), last Jul 1 (TX) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/texas-centers-disease-20250626.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2025
Raw hash: 86c052c82b8c40876e4378771c04524ec3cd9877807bb7846603263d9e3793c5

Linked disclosures

Ransomware claims (2)

Regulatory filings (6) · sorted by filing gap

Reporting entityTexas Centers for Infectious Disease Associates

Victim entityTexas Centers for Infectious Disease Associates

Incidentdiscovered Jul 19, 2024

Stated responseTook steps to secure its environment and enlisted the assistance of outside experts to conduct an investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov