Advocates
ent_cdcde51a0601f6c9b592e26b
Disclosures
10
State AG · HHS OCR · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
70,031
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Advocates
- Normalized
- advocates— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- advocates.org
Disclosure history (10)newest first
- Maine State AGas victim2022-06-30
Advocates, Inc., a healthcare entity based in Framingham, MA, reported an external system breach occurring between September 14 and 18, 2021. Discovered on June 9, 2022, the incident compromised the names and Social Security Numbers of 70,031 individuals, including 94 Maine residents. The company provided written notification on June 28, 2022, and offered 12 months of credit monitoring and fraud protection services through IDX.
- MASSACHUSETTSHHS OCRas victim2022-01-21
Advocates, Inc. reported to HHS on 2022-01-21 a Hacking/IT Incident affecting 70,031 individuals. Breached information located on Network Server. The incident involved a ransomware attack encrypting PHI (including SSN, driver's license, diagnoses, and treatment info). The entity notified HHS, individuals, and media, offered credit monitoring, and implemented security safeguards.
- Maine State AGas victim2022-01-03
Advocates, Inc., a healthcare organization, reported a data breach affecting 68,236 Maine residents. The breach, an external system breach (hacking), occurred on September 14, 2021, and was discovered on December 6, 2021. The compromised information included names and Social Security numbers. In response, Advocates, Inc. offered 12 months of credit monitoring and identity protection services through IDX.
- Montana State AGas victim2022-01-03
Advocates, Inc. notified Montana residents of a cybersecurity attack discovered on October 1, 2021. An unknown actor accessed the network, potentially exposing names, SSNs, and medical/health insurance information. Advocates engaged forensic investigators, notified the FBI, implemented security features, and offered 12-24 months of credit monitoring via IDX.
- Indiana State AGas victim2022-01-03
Advocates, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-09-14 and was reported on 2022-01-03. 7 Indiana residents were affected. 66,265 individuals affected in total.
- New Hampshire State AGas victim2022-01-03
Advocates, Inc., a Massachusetts non-profit providing behavioral health and social services, notified the New Hampshire Attorney General on January 3, 2022, of a cybersecurity incident detected on October 1, 2021. An unknown actor gained unauthorized access to the network, potentially exposing names, SSNs, and medical/health insurance information of 329 New Hampshire residents. Advocates engaged forensic experts, notified the FBI, and offered 12 months of credit monitoring.
- Illinois State AGas victim2022-01-01
ADVOCATES INC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-417). The register records the breach as discovered on October 1, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Massachusetts State AGas victim2021-12-19
Advocates, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-12-19. 66,264 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2015-02-23
Advocates reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-02-23. 1 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGas victim2013-05-13
Advocates Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-05-13. 1 Massachusetts residents were affected. The report records the breach type as both.