DisclosureLens
State AGConfirmed4 filings · 4 statesLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedhigh sensitivity
Merged incident · 4 filings

Catalyst Physician Group — December 2025 breach

Clustered 4 filings across 4 jurisdictions · filing window Sep 11, 2026 → Sep 16, 2026 (dated filings only). View entity profile → Other incidents for this victim →

⚠ 1 cross-filing discrepancy →Merge100%

Determination

Confirmed

Members

4 filings

States

4

Affected · reported

248,144

First → last dated filing

Sep 11, 2026 → Sep 16, 2026

Merge confidence

100%

incident inc_060f33cddb5b4f31 · merged by deterministic · confidence 100%

Confirmed breach. Merged as one breach: 4 regulatory filings. The filings describe hacking. Intrusion Dec 2, 2025–Dec 18, 2025, discovered Jun 26, 2026. 248,144 individuals reported across the linked filings. Data reported: Government ID, Health (basic), Identity (basic), and 1 more. Notifications rolled out on a 5-day schedule across 3 dated filings beginning Sep 11, 2026. Each member filing remains the legal record for its jurisdiction.

Litigation Timing

Supplemental
Filing span
5days

Time between earliest and latest filing

Not recorded for this incident

Discovery variance · Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster; needs two dated filings.

Regulatory clocksTexas✓ TX CRA notice dueFull clock table in Litigation Timeline

The weekly clock on records like this one

The Disclosure Clock is a weekly briefing on what landed in the disclosure record, and the gap between the criminals' post and the regulator's filing — measured on the whole record, with the method shown.

Weekly. Double opt-in, one-click unsubscribe, and the address goes nowhere else.

Catalyst Physician Group data breach (2025) — filings in 4 jurisdictions, September 2026 · DisclosureLens