Clustered 5 filings across 4 jurisdictions · filing window Mar 1, 2019 → Apr 3, 2019. View entity profile → Other incidents for this victim →
incident inc_9ee6c6a652874b68 · merge_method deterministic · confidence 100%
Time between earliest and latest filing
Not recorded for this incident
Discovery variance · Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster; needs two dated filings.
Health (basic) · Identity (basic)
CA MA MT OR
HHS OCR · State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Aug 23, 2018
When the intrusion reportedly occurred, per the linked filings
RSC Insurance Brokerage, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2019-03-01. The breach occurred during 8/23/2018 - 8/23/2018. The breach was discovered on 12/17/20181/22/2019. 2,116 individuals were affected. Notice was sent on 3/1/2019.
Affected (this filing): 2,116
RSC Insurance Brokerage Inc reported a data breach to the Montana Attorney General. The breach was reported on 2019-03-01. The breach occurred from 8/23/2018 to 12/17/2018. 5 Montana residents were affected.
Affected (this filing): 5
RSC Insurance Brokerage, Inc. (MA), a business associate, reported to HHS on 2019-03-01 a Theft affecting 2,088 individuals (19,893 per description). A BA workforce member's backpack containing an unencrypted laptop was stolen. PHI involved included demographic, clinical, and health claims information. The BA notified nine covered entities, affected individuals, media, and HHS. Post-breach remediation included encrypted laptop replacement, device-wide encryption confirmation, policy revisions, and cybersecurity retraining. OCR provided technical assistance on notification timing.
Affected (this filing): 2,088
RSC Insurance Brokerage, Inc. reported the theft of an employee's password-protected laptop on August 23, 2018. The incident potentially exposed personal and health information of individuals served by RSC's healthcare provider clients. RSC notified law enforcement, changed credentials, and engaged a cybersecurity firm. No evidence of data misuse was found. Affected individuals were offered one year of complimentary identity monitoring through Experian.
RSC Insurance Brokerage, Inc. reported the theft of an employee's password-protected laptop on August 23, 2018. The incident potentially exposed the names and Social Security numbers of 1,366 California residents. RSC notified law enforcement, changed credentials, and engaged a cybersecurity firm. No evidence of misuse was found. Credit monitoring was offered to affected individuals.
Affected (this filing): 1,366
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.