Clustered 7 filings across 6 jurisdictions · filing window Jun 17, 2022 → Dec 26, 2022. View entity profile → Other incidents for this victim →
incident inc_78de96bfabfa4abf · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Gap between first leak claim and first regulatory filing
Time between earliest and latest filing
Not recorded for this incident
Materiality delta · SEC filing delay — no SEC 8-K in this cluster.
ME MT NH OR WA
Leak Site · HHS OCR · State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Jan 19, 2022
When the intrusion reportedly occurred, per the linked filings
Mar 17, 2022
Reported by WASHINGTON AG filing
May 18, 2022
Reported by OREGON AG, MAINE AG, HHS OCR filings
Avamere Health Services, LLC (OR) reported to HHS on 2022-07-13 a Hacking/IT Incident (ransomware attack on its network provider) affecting 229,460 individuals. Breached information was located on a Network Server. PHI involved included names, addresses, dates of birth, driver's license and Social Security numbers, claims and financial information, diagnoses, lab results, and medication data. The BA notified HHS, affected individuals, and the media, offered credit monitoring, and strengthened technical safeguards. OCR provided technical assistance.
Affected (this filing): 229,460
Avamere Health Services, LLC reported a cybersecurity incident to the New Hampshire Attorney General on July 16, 2022. The breach involved intermittent unauthorized access to a third-party hosted network between January 19, 2022, and March 17, 2022. The incident compromised protected health information (PHI) and personally identifiable information (PII) of individuals. Avamere engaged forensic investigators and law enforcement, and sent notifications to affected individuals.
Founded in 1995 and headquartered in Wilsonville, Oregon, Avamere Family of Companies is a group of healthcare organizations and systems.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Avamere Health Services LLC reported a data breach to the Montana Attorney General. The breach was reported on 2022-06-17. The breach occurred from 1/19/2022 to 3/17/2022. 278 Montana residents were affected.
Affected (this filing): 278
Avamere Health Services, LLC, a health sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2022-03-17 and filed notice on 2022-06-27. 65,076 Washington residents were affected. 102 days elapsed between awareness and notification. 57 days to identify the breach. 0 days to contain the breach.
Affected (this filing): 65,076
Avamere Health Ser Bvices, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2022-06-30. The breach occurred during 1/19/2022 - 3/17/2022. The breach was discovered on 5/18/2022. 25,672 individuals were affected. Notice was sent on 6/17/2022.
Affected (this filing): 25,672
Premere Rehab, LLC, Signature Healthcare at Home, and Avamere Health Services, LLC reported a data breach affecting 10 Maine residents. The breach, which occurred between January 19, 2022, and March 17, 2022, was discovered on May 18, 2022. The incident was described as an external system breach (hacking), resulting in the compromise of names and Social Security numbers. Affected individuals were notified on June 17, 2022, and offered 12 months of identity theft protection services through IDX.
Affected (this filing): 10