UnknownGovernment IDMedium

Westat, Inc.

bd_f7f9fd512c2dec0d · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 21, 2023

To disclose

—

Affected

130state residents only

Linked

11 records

Confidence

95%

Full breach record for Westat, Inc. →2 incidents on file

Westat, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-21. 130 Massachusetts residents were affected. The report records the breach type as electronic.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA credit monitoring due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Jul 21, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 11 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_752092ce6faa5dd32023-07-10 · +11dVerified by operator

Regulatory filings (9) · sorted by filing gap

Vermont State AGbd_03476d52a3c7f6702023-07-21Verified
New Hampshire State AGbd_241c67cca32741002023-07-21Verified by operator
Montana State AGbd_8839ed78d84140492023-07-21Candidate
Indiana State AGbd_991dc2d92271be1c2023-07-21Verified by operator

Show 5 more filings ↓up to 105d gap

Maine State AGbd_be6506ff947b42aa2023-07-21Candidate
Indiana State AGbd_4027da82b6e67c622023-10-13 · +84dVerified
HHS OCRbd_5b63e0b82f445a712023-10-13 · +84dVerified
South Carolina State AGbd_2e1ea343e7bb4ee72023-10-16 · +87dVerified by operator
HHS OCRbd_0a5c6e5ef62bfc8d2023-11-03 · +105dCandidate

Name: Westat, Inc.
norm: westat
Domain: westat.com

Name: Westat, Inc.
norm: westat
Domain: westat.com

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 130state-resident count only
Data types: Government ID
Data elements: Social Security number
Stated not affected: Financial account numberDriver's licence numberPayment card number
The filing states these were not involved. Categories absent from both lists were not addressed either way.
Attack vector: Unknown

Compliance flags: MA credit monitoring due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 8 states

View merged incident ↗

Vermont State AGJul 21 · first

New Hampshire State AGJul 21 · first

Montana State AGJul 21 · first

Indiana State AGJul 21 · first

Maine State AGJul 21 · first

Massachusetts State AGJul 21 · first · this page

Indiana State AG+84d

HHS OCR+84d

South Carolina State AG+87d

HHS OCR+105d

Pattern: first filing Jul 21 (VT), last Nov 3 (MD) — a 105-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/data-breach-report-2023/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2023
Raw hash: 153308ad6c02522a436c241ab9a0ceb8ac0d5c6c2e70cbdd74c91165e181a652

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityWestat, Inc.

Victim entityWestat, Inc.

IncidentUnknown

ComplianceMA credit monitoring due

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov