Confirmed breach. Intrusion Jun 20, 2023, discovered Jul 8, 2023 — the first regulatory filing landed 257 days later (flagged late). 284,326 individuals reported across the linked filings.
M&D Capital Premier Billing LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-07-08 and was reported on 2024-03-21. 22 Indiana residents were affected. 284,326 individuals affected in total.
Affected (this filing): 284,326
🗽NEW YORKHHS OCRlinked via same-victim cross-source · 100%
M&D Capital Premier Billing LLC, a business associate (BA) based in NY, reported a cybersecurity incident to HHS on 2024-03-21 affecting the PHI of 284,326 individuals. Breached information was located on a Network Server and included clinical, demographic, and financial information. The CE notified HHS, affected individuals, and the media, and provided substitute notice. The BA offered complimentary credit monitoring, implemented additional safeguards, and retrained workforce members.
Affected (this filing): 284,326
🐻California State AGlinked via same-victim cross-source · 100%
M&D Capital Premier Billing LLC notified patients of a data breach involving unauthorized access to systems containing demographic, healthcare, and financial information, including SSNs and diagnoses. Suspicious activity was identified on July 8, 2023, with access potentially beginning June 20, 2023. The company engaged forensic specialists, notified law enforcement, and implemented additional security safeguards. Affected individuals are offered credit monitoring and fraud assistance.
CA 60-day late · 254d
🍁Vermont State AGMost recentlinked via same-victim cross-source · 100%
M&D Capital Premier Billing LLC reported a data breach affecting healthcare and billing data. Suspicious activity was identified on July 8, 2023, with unauthorized access potentially starting June 20, 2023. Affected data included names, addresses, SSNs, DOBs, medical diagnoses, and financial info. The company engaged forensic specialists, notified law enforcement, and offered 12 months of credit monitoring.
VT AG >45 bday
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.