Social EngineeringHealthcareHealthcarePhishingStolen CredentialsCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowContained

Village Fertility Pharmacy Group

bd_f473c068b30d6a47 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 14, 2024

Filed

Nov 6, 2024

To disclose

23 days

Affected

1state residents only

Linked

2 filings

Confidence

64%

Full breach record for Village Fertility Pharmacy Group →

Village Fertility Pharmacy, LLC notified individuals of a data breach involving unauthorized access to an email account. The incident occurred between July 19, 2024, and August 1, 2024, and was identified on October 14, 2024. Patient medical history, prescription info, and names were potentially accessed. The company implemented technical controls and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 87 days

discovery → filing · 23 days

Jul 19, 2024

Begins

Oct 14, 2024

Discovered

Nov 6, 2024

Filed

vs. sector median

8 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_6a9cf58518e5782a2024-11-06Verified

Name: Village Fertility Pharmacy Group
norm: village fertility pharmacy
Domain: villagepharmacy.com

Name: Village Fertility Pharmacy Group
norm: village fertility pharmacy
Domain: villagepharmacy.com
Industry: Healthcarellm

Discovered: Oct 14, 2024
Breach occurred: Jul 19, 2024 – Aug 1, 2024
Undetected for: 87 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 6, 2024
Affected individuals: 1state-resident count only
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Village Fertility and its Privacy Office have thoroughly investigated the circumstances surrounding this situation
Village has implemented additional technical controls
Partnered with Equifax to provide Complete Premier identity theft protection product at no cost
Changes made: Implemented additional technical controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGNov 6 · first

Montana State AGNov 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/01/Consumer-notification-letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2024
Raw hash: fc4ddfd13b71bfb4dbdaaf15a583a1697c8340c60e0130a9a0c8d68a76d4a074

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityVillage Fertility Pharmacy Group

Victim entityVillage Fertility Pharmacy Group

Incidentdiscovered Oct 14, 2024

Stated responseVillage Fertility and its Privacy Office have thoroughly investigated the circumstances surrounding this situation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov