DisclosureLens
HackingHealthcareProfessional ServicesHealthcareSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Ruffolo, Hooper & Associates, MD, PA

bd_fc5e851b479bd88e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 5, 2024

Filed

May 21, 2025

To disclose

46 weeks

Affected

Not disclosed

Confidence

64%
Full breach record for Ruffolo, Hooper & Associates, MD, PA →

Nationwide Recovery Services (NRS), a third-party vendor for Ruffolo, Hooper & Associates (RHA), experienced unauthorized access to its network between July 5-11, 2024. The incident potentially impacted personal information including names, addresses, SSNs, dates of birth, and health/insurance data. RHA notified affected individuals in May 2025 and offered 12 months of credit monitoring. NRS implemented additional cybersecurity measures.

Vermont clock✗ VT AG >45 bday46 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 46 weeks / 320 days

Jul 5, 2024

Begins

Jul 5, 2024

Discovered

May 21, 2025

Filed

vs. sector median

+36 wks slower

Part of Nationwide Recovery Services, Inc. supply-chain incident (2025) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.