Clustered 2 filings across 1 jurisdiction · filing window Mar 12, 2018 → Apr 13, 2018. View entity profile → Other incidents for this victim →
incident inc_b8fbdc3a16ae4bdc · merge_method llm · confidence 45%
Time between earliest and latest filing
Not recorded for this incident
Discovery variance · Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster; needs two dated filings.
PHI · Health (basic) · Identity (basic)
IL
all HHS OCR
Earliest sighting first · deep chronology in Litigation Timeline
ATI Holdings, LLC reported to HHS on 2018-03-12 a Hacking/IT Incident affecting 45,800 individuals. Breached information located on Email. Employees were victims of an email phishing scheme exposing PHI, including names, DOB, SSN, driver's license, and financial/health insurance data. The entity implemented security safeguards and retrained staff.
Affected (this filing): 45,800
ATI Holdings, LLC (IL) reported to HHS on 2018-04-13 a Hacking/IT Incident (email phishing attack) affecting 2,645 individuals. Multiple employees were victims of a phishing attack exposing PHI stored in Email systems. Compromised data included names, dates of birth, Social Security numbers, addresses, drivers' license numbers, diagnoses/conditions, medications, and financial/treatment information. The entity notified HHS, affected individuals, the media, and posted substitute notice on its website. Remediation included additional technical safeguards and staff retraining on email security.
Affected (this filing):
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.