HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
AuthoraCare Collective
bd_f5a32e5bbf3db4e1 · schema v1 · pii pii-v1
Full breach record for AuthoraCare Collective →AuthoraCare Collective notified South Carolina residents of a data security breach occurring between August 18-22, 2024. An unauthorized actor accessed systems containing names, Social Security numbers, and medical diagnoses. AuthoraCare engaged outside IT experts, secured systems, notified law enforcement and HHS OCR, and provided 12 months of credit monitoring and fraud assistance via TransUnion/Cyberscout.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4d16b6e991170857New Hampshire State AGfiled 2025-03-12(1d gap)Verified
- bd_ce2cbf01e68366c7Maine State AGfiled 2025-03-11(2d gap)Candidate
- bd_381b87b78fbfee06Indiana State AGfiled 2025-04-10(28d gap)Verified
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2025/AuthoraCareCollective.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 13, 2025
- Raw hash
- a1dba0c3ada14cb3ba715c2a21086b2760d90f3e5b39207b5ba83bab6205b60a
Reporting entity
- Name
- AuthoraCare Collectivenorm: authoracare collective
Victim entity
- Name
- AuthoraCare Collectivenorm: authoracare collective
Incident
- Discovered
- Aug 22, 2024
- Materiality determined
- —
- Notification sent
- Jan 2, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcementReported the incident to the Department of Health and Human Services with the Office of Civil Rights
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 weeks(203 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.