Country : United States of America - Exfiltraded data : yes - Encrypted data : yes
Clustered 6 filings across 5 jurisdictions · filing window Nov 11, 2023 → Apr 22, 2024. View entity profile → Other incidents for this victim →
incident inc_b31618d9022243da · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Gap between first leak claim and first regulatory filing
Time between earliest and latest filing
Not recorded for this incident
Materiality delta · SEC filing delay — no SEC 8-K in this cluster.
Identity (basic) · Government ID · Health (basic)
IN ME RI VT
Leak Site · HHS OCR · State AG
Earliest sighting first · deep chronology in Litigation Timeline
Nov 11, 2023
When the intrusion reportedly occurred, per the linked filings
Nov 11, 2023
Reported by VERMONT AG filing
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes
Dec 19, 2023
Reported by Leak Site filing
Mar 11, 2024
Reported by MAINE AG filing
Blackstone Valley Community Health Care (RI) reported to HHS on 2024-04-22 a Hacking/IT Incident (ransomware attack) affecting 34,518 individuals. Breached information located on a Network Server. PHI involved included names, SSNs, driver's license numbers, addresses, dates of birth, and treatment information. The CE notified HHS, affected individuals, and the media, and provided free credit monitoring. Additional administrative, technical, security, and physical safeguards were implemented.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Blackstone Valley Community Health Care reported a data security incident on November 11, 2023, where unauthorized access to its computer network may have exposed personal health information, including names, dates of birth, health insurance details, and medical records. The organization engaged forensic experts, notified the FBI, and enhanced network security.
Blackstone Valley Community Health Center reported a data breach to the Indiana Attorney General. The breach occurred on 2023-11-10 and was reported on 2024-04-18. 7 Indiana residents were affected. 34,416 individuals affected in total.
Affected (this filing): 34,416
Blackstone Valley Community Health Center experienced an external system breach from November 10 to November 11, 2023. The incident was discovered on March 11, 2024. The breach affected 34,416 individuals, compromising names and Social Security numbers. The organization began notifying affected individuals on April 18, 2024, and offered 12 months of identity protection services.
Affected (this filing): 34,416
Affected (this filing): 34,518