California State AG
Clustered 6 filings across 5 jurisdictions · filing window Aug 23, 2023 → Oct 9, 2023. View entity profile → Other incidents for this victim →
incident inc_277cb7fb2e07491a · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
PHI · Health (basic) · Government ID
CA DE GA ME WA
HHS OCR · State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
May 31, 2023 → Jun 1, 2023
When the intrusion reportedly occurred, per the linked filings
Jun 1, 2023 – Jun 30, 2023
Earliest reported discovery Jun 1, 2023
Jun 1, 2023
Reported by CALIFORNIA AG, DELAWARE AG filings
Jun 4, 2023
Reported by WASHINGTON AG filing
Jun 30, 2023
Reported by MAINE AG, HHS OCR filings
Data Media Associates, a business sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2023-06-04 and filed notice on 2023-09-25. 657 Washington residents were affected. 113 days elapsed between awareness and notification.
Affected (this filing): 657
Data Media Associates, LLC was impacted by the MOVEit vulnerability exploit between May 31 and June 1, 2023. The breach was discovered on June 30, 2023, and exposed the names and Social Security numbers of 133 Maine residents. The company offered affected individuals 12 months of identity theft protection services.
Affected (this filing): 133
HHS OCR breach portal entry: Data Media Associates (GA, Business Associate), 2,035 individuals affected, reported 2023-10-09. Type: Unauthorized Access/Disclosure; Location: Paper/Films. Web description attributes the underlying incident to business associate NASCO, which reported a software application exposed PHI of 1,744,655 individuals (names, DOB, addresses, SSNs, diagnoses, claims and health insurance/treatment information). Note: the 1,744,655 figure refers to NASCO's overall reported breach population, while this specific OCR row lists 2,035 individuals tied to Data Media Associates.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Data Media Associates, LLC disclosed a data breach affecting protected health information due to the exploitation of a critical vulnerability in MOVEit Transfer software. The incident occurred between May 31 and June 1, 2023, and was discovered in June 2023. Affected data may include names, addresses, health insurance IDs (potentially SSNs), and other PHI. The company patched the system, engaged external experts, and offered identity theft protection services.
Data Media Associates, LLC (DMA) notified Delaware residents of a data security incident involving its MOVEit Transfer software. In June 2023, DMA discovered a critical vulnerability in the managed file transfer solution and patched the system. An investigation revealed that unauthorized actors acquired certain data, potentially including protected health information (PHI), names, and government IDs. DMA engaged external experts, patched the system, and is evaluating additional safeguards. The incident affected approximately 2,500 organizations worldwide.
Data Media Associates, LLC reported a data breach affecting 131 Maine residents. The incident occurred between May 31, 2023, and June 1, 2023, and was discovered on June 30, 2023. The compromised information included names and Social Security numbers. The company offered 12 months of identity theft protection services through IDX.
Affected (this filing): 131
Affected (this filing): 2,035