Disclosures Claims Reports Entities Incidents Pulse

Feed live

DisclosureLens

Structured extracts of public breach disclosures — regulator filings (SEC, HHS, state AGs, EU DPAs) alongside threat-actor leak-site claims and press reports. SEC and HHS filings render inline from the originating regulator’s public record under the fair report privilege; other sources link out to the source URL. AI-extracted with full per-record audit trail (model, prompt version, confidence).

ai_assisted: true · Article 50 disclosure on every record

Product

Disclosures feed
Pulse · analytics
Entities
Breach notifications by state

Methodology

How extraction works
Confidence & review
About the bot

Trust

Security
Self-disclosure commitment
API documentation
API keys

v0.1.0 · coverage growing weekly

Oncology Institute, Inc. data breach (2026) · DisclosureLens

All incidents View linkage analytics →

Incident · single filing

Oncology Institute, Inc.

One linked filing — more sources may join as they report · filed Mar 12, 2026. View entity profile → Other incidents for this victim →

Confirmed breach. discovered Nov 3, 2025 — the first regulatory filing landed 129 days later (flagged late).

incident inc_2b786bd584bc4684 · merge_method deterministic

Litigation Timing

Notification delay

129days

Discovered → first regulatory filing

Not recorded for this incident

Discovery variance · Leak precedence · Materiality delta · SEC filing delay · Filing span — no leak-site claim in this cluster; needs two dated filings.

Regulatory clocksSEC✗ SEC 4-day late · 129dFull clock table in Litigation Timeline

SEC 10-K Item 1CConfirmedLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedlow sensitivity

Affected (total reported)

—

Data types

PII

Jurisdictions

FEDERAL

Linked filings

all SEC 10-K Item 1C

Timeline

Earliest sighting first · deep chronology in Litigation Timeline

Breach discovered
Nov 3, 2025
Reported by SEC 10-K Item 1C filing
Materiality determined
Nov 3, 2025
Registrant determined the incident material — starts the SEC 4-business-day clock
129 days
FEDERALSEC 10-K Item 1CFirst filing
Filed Mar 12, 2026bd_deda4b07d72f2020
The Company (a healthcare IT entity) disclosed a cybersecurity incident involving a third-party software provider on November 3, 2025. The incident caused a brief, immaterial delay in fee-for-service collections. No evidence of patient personal information compromise was found, though investigation is ongoing. Normal billing operations were restored.
SEC 4-day late · 129d

About this clustering

DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.