Clustered 4 filings across 2 jurisdictions · filing window May 15, 2024 → Aug 2, 2024. View entity profile → Other incidents for this victim →
incident inc_b4f0394dbb2b46bb · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Gap between first leak claim and first regulatory filing
Time between earliest and latest filing
Not recorded for this incident
Discovery variance · Materiality delta · SEC filing delay — no SEC 8-K in this cluster; needs two dated filings.
Identity (basic) · Government ID · Health (basic)
CA
Leak Site · HHS OCR · State AG
Earliest sighting first · deep chronology in Litigation Timeline
Mar 4, 2024 → Apr 20, 2024
When the intrusion reportedly occurred, per the linked filings
With a commitment to excellence, AMMI employs the staff, knowledge, and technology to provide seamless solutions that equate to increased effectiveness and returns for our clients
May 23, 2024
Reported by CALIFORNIA AG filing
Allcare Medical Management, Inc. reported unauthorized access to an employee email account between March 4 and April 20, 2024. The incident was detected on May 23, 2024. The breach potentially exposed PHI, SSNs, and other PII for patients of Family Planning Associates Medical Group, Inc. Allcare engaged forensic investigators, secured the account, and is offering credit monitoring.
Allcare Medical Management Incorporated, a business associate based in CA, reported to HHS on 2024-07-22 a Hacking/IT Incident (email phishing) affecting 16,378 individuals. An employee was the subject of an email phishing scheme that exposed PHI including names, dates of birth, Social Security numbers, and other demographic information. Breached information located on Email. The BA notified HHS, affected individuals, and media; implemented additional safeguards; and retrained staff on email security. OCR provided technical assistance.
Allcare Medical Management, Inc. reported a data breach to the California Attorney General. The incident occurred on April 16, 2024. The notification letter, with an enrollment deadline of August 30, 2024, offers 12 months of Experian IdentityWorks credit monitoring to affected individuals. The specific nature of the breach, data types exposed, and number of affected individuals are not detailed in the provided HTML summary or the redacted attachment pages.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Affected (this filing): 16,378