Disclosures Claims Reports Entities Incidents Pulse

Feed live

DisclosureLens

Structured extracts of public breach disclosures — regulator filings (SEC, HHS, state AGs, EU DPAs) alongside threat-actor leak-site claims and press reports. SEC and HHS filings render inline from the originating regulator’s public record under the fair report privilege; other sources link out to the source URL. AI-extracted with full per-record audit trail (model, prompt version, confidence).

ai_assisted: true · Article 50 disclosure on every record

Product

Disclosures feed
Pulse · analytics
Entities
Breach notifications by state

Methodology

How extraction works
Confidence & review
About the bot

Trust

Security
Self-disclosure commitment
API documentation
API keys

v0.1.0 · coverage growing weekly

St. Charles Health System, Inc. data breach (2025) · DisclosureLens

All incidents View linkage analytics →

Merged incident · 2 filings

St. Charles Health System, Inc.

Clustered 2 filings across 2 jurisdictions · filing window May 1, 2025 → May 2, 2025. View entity profile → Other incidents for this victim →

⚠ 1 cross-filing discrepancy →Merge100%

Confirmed breach. Intrusion Mar 3, 2025, discovered Mar 3, 2025 — the first regulatory filing landed 59 days later. 4,153 individuals reported across the linked filings.

incident inc_21956dfb177a4141 · merge_method deterministic · confidence 100%

Litigation Timing

Notification delay

59days

Discovered → first regulatory filing

Discovery variance

31days

Range of discovered_at dates across filings

Filing span

Regulatory clocksOregon✓ OR AG ≤45dFull clock table in Litigation Timeline

State AGConfirmedLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforced

Affected (total reported)

4,153

Data types

—

Jurisdictions

NH OR

1days

Time between earliest and latest filing

Not recorded for this incident

Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.

Linked filings

all State AG

Timeline

Earliest sighting first · deep chronology in Litigation Timeline

Breach window
Mar 3, 2025
When the intrusion reportedly occurred, per the linked filings
Breach discoveredletter-grounded
Mar 3, 2025
Reported by NEW HAMPSHIRE AG filing
31 days
Breach discoveredconflicts with Mar 3, 2025AG web form
Apr 3, 2025
Reported by OREGON AG filing
⛰️New Hampshire State AGFirst filinglinked via multistate filing link · 100%
Filed May 1, 2025bd_c96d35b202d690a1
St. Charles Health System, Inc. notified the NH AG of a processing error on March 3, 2025, where IRS Form 1095-Cs were mailed to incorrect recipients. One NH resident was affected. The incident involved PII including names and SSNs. SCHS provided credit monitoring via TransUnion and notified regulators.
Affected (this filing): 1
🦫Oregon State AGMost recent
Filed May 2, 2025bd_fb81a3642f58de65
St. Charles Health System, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2025-05-02. The breach occurred during 3/3/2025 - 3/3/2025. The breach was discovered on 4/3/2025. 4,152 individuals were affected. Notice was sent on 5/2/2025.
Affected (this filing): 4,152
OR AG ≤45d

About this clustering

DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.