HackingTechnologyManufacturingInformationCustomer Data InvolvedDelayed DiscoveryPIILowContained

OSI SYSTEMS, INC.

bd_f9015384334e14fd · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 11, 2026

To disclose

—

Affected

Not disclosed

Linked

10 records

Confidence

77%

Full breach record for OSI SYSTEMS, INC. →

OSI Systems, Inc. notified the California AG of unauthorized access to its network. Files were potentially accessed without authorization on December 23, 2025. A comprehensive investigation with third-party forensic specialists was completed February 10, 2026. Affected data includes names and other personal information. Complimentary credit monitoring via IDX was offered to affected individuals. Additional security measures are being implemented.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Dec 23, 2025

Begins

Feb 10, 2026

Scope determined

Mar 11, 2026

Filed

This filing is one of 10 records about the same incident.View merged incident

A leak claim by inc_ransom about this victim was first seen 71 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteinc_ransombd_0fe82859b7e740312025-12-30 · +71dVerified

Regulatory filings (8) · sorted by filing gap

Nebraska State AGbd_03b6bd32acad77302026-03-11Verified
New Hampshire State AGbd_0a97f13a9774839c2026-03-11Verified by operator
Maine State AGbd_1be6cf685a8a18642026-03-11Verified
Washington State AGbd_5de9a0ae9cba56792026-03-11Verified by operator

Show 4 more filings ↓up to 1d gap

Indiana State AGbd_70c902ae9bbbfa9f2026-03-11Verified
Massachusetts State AGbd_7bfa9894135dbf542026-03-11Verified by operator
Texas State AGbd_a5c9fc36c25a18cd2026-03-12 · +1dVerified
Vermont State AGbd_c9de4de82a0958042026-03-10 · +1dVerified by operator

Name: OSI SYSTEMS, INC.
norm: osi systems
Domain: osi-systems.com

Name: OSI SYSTEMS, INC.
norm: osi systems
Domain: osi-systems.com
Industry: TechnologyllmManufacturingllm

Discovered: —
Breach occurred: Dec 23, 2025
Materiality determined: Feb 10, 2026
Notification sent: Mar 11, 2026
Affected individuals: Not disclosed
Data types: PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1074 Data Staged
Threat actor: External
Regulator citations: Notified California Attorney GeneralNotified District of Columbia Attorney GeneralNotified Maryland Attorney GeneralNotified New York Attorney GeneralNotified North Carolina Attorney General

During the incident: Promptly took steps to secure our network
Initiated a comprehensive investigation to determine the full nature and scope of the activity with the assistance of third-party forensic specialists
Identified the affected files and conducted a time-intensive and comprehensive review to identify sensitive information contained therein
Completed review process on February 10, 2026 and began notifying potentially impacted individuals
Offering complimentary single bureau credit monitoring and fraud assistance for twelve (12) / twenty-four (24) months from the date of enrollment through IDX
Changes made: Implementing additional security measures to further protect against similar incidents occurring in the future
Confirming the security of our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Vermont State AGMar 10 · first

Nebraska State AG+1d

New Hampshire State AG+1d

Maine State AG+1d

Washington State AG+1d

Indiana State AG+1d

Massachusetts State AG+1d

California State AG+1d · this page

Texas State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-619986
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 11, 2026
Raw hash: a9b8eeb5b7b36e97deb9a2c85312402871c5f95bc8027b4e02e159fcdf367b10

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityOSI SYSTEMS, INC.

Victim entityOSI SYSTEMS, INC.

IncidentUnauthorized Access

Stated responsePromptly took steps to secure our network

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov