Vermont State AG
Clustered 8 filings across 8 jurisdictions · filing window Apr 27, 2023 → May 5, 2023. View entity profile → Other incidents for this victim →
incident inc_bde4f28dd3d74c2d · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
CA DE ME MT NH OR VT WA
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
8 filings across 8 jurisdictions · Apr 27, 2023 – May 5, 2023 · 3 milestones
Mar 29, 2023 → Apr 14, 2023
When the intrusion reportedly occurred, per the linked filings
Mar 30, 2023
Reported by VERMONT AG, DELAWARE AG, WASHINGTON AG, CALIFORNIA AG, NEW HAMPSHIRE AG filings
Apr 24, 2023
Reported by OREGON AG, MAINE AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
NextGen Healthcare, Inc. notified Vermont consumers of a data incident where an unknown third party gained unauthorized access to personal information (name, DOB, address, SSN) between March 29 and April 14, 2023. No health records were accessed. NextGen engaged forensic experts, reset passwords, contacted law enforcement, and offered 24 months of identity theft protection.
NextGen Healthcare, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-04-28. The breach occurred from 3/29/2023 to 4/14/2023. 3,343 Montana residents were affected.
Affected (this filing): 3,343
NextGen Healthcare, Inc. notified patients of a data incident involving unauthorized access to the NextGen Office system between March 29 and April 14, 2023. The breach exposed personal information including names, dates of birth, addresses, and Social Security numbers. No health or medical records were accessed. NextGen engaged forensic experts, reset passwords, contacted law enforcement, and offered 24 months of identity theft protection via Experian.
NextGen Healthcare, Inc., a health sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2023-03-30 and filed notice on 2023-05-03. 21,981 Washington residents were affected. 34 days elapsed between awareness and notification. 1 days to identify the breach. 15 days to contain the breach.
Affected (this filing): 21,981
NextGen Healthcare, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-04. The breach occurred during 3/29/2023 - 4/14/2023. The breach was discovered on 4/24/2023. 1,049,375 individuals were affected. Notice was sent on 4/28/2023.
Affected (this filing): 1,049,375
NextGen Healthcare, Inc. reported a data incident where an unknown third party gained unauthorized access to its NextGen Office system using stolen client credentials. The breach affected personal information of 1,094 New Hampshire residents between March 29 and April 14, 2023. No health records were impacted. NextGen engaged forensic experts, reset passwords, notified law enforcement, and offered 24 months of credit monitoring.
Affected (this filing): 1,094
NextGen Healthcare, Inc. reported a data breach occurring between March 29, 2023, and April 14, 2023, discovered on April 24, 2023. Unauthorized access to a database occurred via stolen client credentials obtained from unrelated incidents. The breach affected approximately 1,049,375 individuals, including 3,913 Maine residents. Compromised data included names and Social Security Numbers. NextGen provided 24 months of identity theft protection through Experian.
Affected (this filing): 1,049,375
NextGen Healthcare, Inc. notified individuals of a security incident where an unknown third party gained unauthorized access to personal information between March 29 and April 14, 2023. The accessed data included names, dates of birth, addresses, and Social Security numbers. No health or medical records were accessed. The company engaged forensic experts, reset passwords, and contacted law enforcement. Affected individuals are offered 24 months of identity theft protection.