Clustered 3 filings across 3 jurisdictions · filing window Jan 15, 2024 → Oct 23, 2024. View entity profile → Other incidents for this victim →
incident inc_6484de4554c24e8d · merge_method human · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Gap between first leak claim and first regulatory filing
Time between earliest and latest filing
Not recorded for this incident
Materiality delta · SEC filing delay — no SEC 8-K in this cluster.
ME NH
Leak Site · State AG
Earliest sighting first · deep chronology in Litigation Timeline
Dec 28, 2023 → Jan 5, 2024
When the intrusion reportedly occurred, per the linked filings
Jan 8, 2024
Reported by NEW HAMPSHIRE AG, MAINE AG filings
NorthEast Spine and Sports Medicine is a large multi-specialty medical group in New Jersey specializing in orthopedic surgery, neurosurgery, pain management, sports medicine, chiropractic, physical & occupational therapy, acupuncture and massage.
Northeast Spine and Sports Medicine, LLC reported a ransomware incident attributed to the Bian Lian cyber organization. The intrusion occurred between late December 2023 and early January 2024, with detection on January 8, 2024. Approximately 3 New Hampshire residents were affected. Compromised data included PHI, SSNs, names, DOBs, and financial/insurance information. The company engaged forensic investigators, isolated systems, notified law enforcement, and implemented enhanced security measures including MFA and firewall upgrades.
Northeast Spine and Sports Medicine LLC, a healthcare organization, reported an internal system breach that occurred and was discovered on January 8, 2024. One Maine resident was affected. The company provided electronic notification to affected individuals on October 17, 2024, and offered 24 months of free credit monitoring services through Experian.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Affected (this filing): 3
Affected (this filing): 1