Clustered 4 filings across 4 jurisdictions · filing window Jan 1, 2022 → Jan 2, 2022. View entity profile → Other incidents for this victim →
incident inc_3b596455f340429b · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
CA ME OR WA
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Oct 15, 2021
When the intrusion reportedly occurred, per the linked filings
Oct 19, 2021
Reported by CALIFORNIA AG, WASHINGTON AG, MAINE AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
North Broward Hospital District (d/b/a Broward Health) reported a cybersecurity incident on October 15, 2021, discovered on October 19, 2021. An intruder gained unauthorized access to the network via a third-party medical provider's credentials. The incident involved the exfiltration of patient personal and medical information, including names, SSNs, DOBs, financial account numbers, and medical records. Broward Health contained the breach, notified the FBI and DOJ, reset passwords, and engaged forensic investigators. Notification letters were sent to affected individuals on January 1, 2022, offering two years of Experian IdentityWorks.
North Broward Hospital District d/b/a Broward Health reported a data breach to the Oregon Attorney General. The breach was reported on 2022-01-02. 1,357,879 individuals were affected.
Affected (this filing): 1,357,879
North Broward Hospital District d/b/a Broward Health, a health sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2021-10-19 and filed notice on 2022-01-02. 1,168 Washington residents were affected. 75 days elapsed between awareness and notification. 4 days to identify the breach. 0 days to contain the breach.
Affected (this filing): 1,168
North Broward Hospital District d/b/a Broward Health, a healthcare organization, reported a data breach affecting 1,357,879 individuals, including 473 Maine residents. The breach occurred on October 15, 2021, and was discovered on October 19, 2021. The incident was described as an external system breach (hacking). The compromised information included names and driver's license or other non-driver identification card numbers. Affected individuals were notified on January 1, 2022, and offered 24 months of identity theft protection services.
Affected (this filing): 473