Upstream RollCo, LLC
ent_5f2d8567092221abc42da4c6
Disclosures
7
State AG · HHS OCR · 7 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
748,678
nationwide · HHS OCR AL
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Upstream RollCo, LLC
- Normalized
- upstream rollco— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (7)newest first
- South Carolina State AGas victim2023-09-18
Upstream RollCo, LLC notified South Carolina residents of unauthorized access to employee email accounts between Jan 24 and Feb 9, 2023. The incident involved phishing leading to credential compromise and email collection. Affected data included names. Upstream offered 12 months of credit monitoring.
- Massachusetts State AGas victim2023-09-15
Upstream RollCo, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-09-15. 4 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2023-09-15
Upstream RollCo LLC notified Montana residents of unauthorized access to employee email accounts between Jan 24 and Feb 9, 2023. The incident involved phishing leading to credential compromise. Affected data included names and variable personal data. The company offered credit monitoring and is enhancing security policies.
- California State AGas victim2023-09-15
Upstream RollCo, LLC notified California residents of unauthorized access to employee email accounts between Jan 24 and Feb 9, 2023. The incident involved potential access to names and other personal information. The company secured the email environment, investigated the scope, and is offering credit monitoring. No specific count of affected individuals was disclosed in the notice.
- Washington State AGas victim2023-09-15
Upstream RollCo, LLC notified Washington residents of a cyberattack where unauthorized parties accessed employee email accounts containing PHI, SSNs, and financial data between Jan 24 and Feb 9, 2023. 14,247 residents were notified on Sept 15, 2023. Credit monitoring was offered.
- ALABAMAHHS OCRas victim2023-04-22
Upstream RollCo, LLC (AL healthcare provider) reported to HHS OCR that multiple employees were targets of an email phishing incident that compromised PHI of 748,678 individuals. Affected data included names, dates of birth, Social Security Numbers, addresses, claims information, diagnoses, and other treatment information. The entity notified HHS, affected individuals, the media, and posted substitute notice on its website, and implemented additional administrative, technical, and security safeguards.
- Illinois State AGas victim2023-01-01
UPSTREAM ROLLCO, LLC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-638). The register records the breach as discovered on January 23, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.