Gaia

Gaia's 10-K Item 1C cybersecurity disclosure describes its cybersecurity risk-management program, board oversight, VP of IT leadership, employee training, and reliance on third-party cloud and CDN providers. The filing explicitly states that cybersecurity threats, including any previous incidents, have not materially affected and are not reasonably likely to affect the Company. No specific cybersecurity incident is disclosed.

Gaia Software, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2024-08-30. The breach occurred on 2/5/2024. 2 Montana residents were affected.

Gaia Software, LLC, a provider of electronic medical records and billing services, reported a cybersecurity incident detected on February 5, 2024. An unauthorized third party attempted to infiltrate the network and demand ransom. The investigation concluded on April 19, 2024. No evidence of misuse was found, but PII may have been exposed. Three New Hampshire residents were affected. Gaia engaged forensic investigators, worked with law enforcement, and offered credit monitoring.

Gaia Software, LLC, a third-party software provider for AMERICARE RENAL CENTER LLC HD, disclosed a cybersecurity incident detected on February 5, 2024. An unauthorized third party attempted to infiltrate Gaia's network and demand a ransom. The investigation concluded on April 19, 2024. Potential exposure includes names, addresses, DOBs, SSNs, health insurance, and health information. Gaia engaged external experts and offers 12 months of credit monitoring.

Gaia Software, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2024-01-27 and was reported on 2024-06-28. 381 Indiana residents were affected. 21,866 individuals affected in total.