HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Healthcare
bd_f7ff890940575fff · schema v1 · pii pii-v1
Full breach record for Healthcare →Healthcare Interactive, Inc. notified consumers of a security incident where an unauthorized actor copied files from its network between July 8-12, 2025. The incident was discovered on July 22, 2025. Potentially impacted data includes names combined with government identifiers (e.g., SSN). No evidence of misuse was found. HCI offered credit monitoring and enhanced security measures.
Vermont clock✗ VT AG >45 bday19 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 11 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_2f93d58752934b0fDelaware State AGfiled 2025-12-02Verified
- bd_dc7a379ed18a2f4bIndiana State AGfiled 2025-12-02Verified
- bd_24e627b87c7f7770Montana State AGfiled 2025-12-03(1d gap)Candidate
- bd_6abe8471281b13c9California State AGfiled 2025-12-04(2d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 36d gap
- bd_70260a8e76e0307dNew Hampshire State AGfiled 2025-12-04(2d gap)Verified
- bd_f2bc4b14a0bb937cTexas State AGfiled 2025-12-05(3d gap)Verified
- bd_3fb448554080b067Iowa State AGfiled 2026-01-07(36d gap)Verified
- bd_c26c4bb7875814e3South Carolina State AGfiled 2026-01-07(36d gap)Verified
- bd_e618981a846f7f18Oregon State AGfiled 2026-01-07(36d gap)Verified
- bd_ea0e211988dbadb8Washington State AGfiled 2026-01-07(36d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-02-healthcare-interactive-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 2, 2025
- Raw hash
- 9831589b446b3c3df8ab3a7a44a4b95e361c8a19d022f8e3e4946527a8ca47c7
Reporting entity
- Name
- Healthcarenorm: healthcare
- Domain
- healthcare.ascension.org
Victim entity
- Name
- Healthcarenorm: healthcare
- Domain
- healthcare.ascension.org
Incident
- Discovered
- Jul 22, 2025
- Materiality determined
- —
- Notification sent
- Dec 5, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
Compliance
- Time to disclose
- 19 weeks(133 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.