Clustered 5 filings across 5 jurisdictions · filing window May 9, 2023 → May 12, 2023. View entity profile → Other incidents for this victim →
incident inc_c7bae6b947aa4569 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
Identity (basic) · Government ID · Health (basic)
ME MT OR UT VT
HHS OCR · State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Nov 7, 2022
When the intrusion reportedly occurred, per the linked filings
Nov 7, 2022
Reported by VERMONT AG filing
Apr 7, 2023
Reported by HHS OCR, MAINE AG, OREGON AG filings
Uintah Basin Healthcare reported a data breach to the Montana Attorney General. The breach was reported on 2023-05-09. The breach occurred on 11/7/2022. 230 Montana residents were affected.
Affected (this filing): 230
Uintah Basin Healthcare notified patients of a data breach involving unauthorized network access. The incident, discovered Nov 7, 2022, potentially exposed names, SSNs, DOBs, addresses, insurance info, and clinical details for patients seen between March 2012 and Nov 2022. UBH engaged forensic investigators, notified the FBI, and offered credit monitoring.
Uintah Basin Healthcare (UT) reported to HHS on 2023-05-10 a ransomware attack affecting 103,974 individuals. PHI stored on network servers was compromised, including names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications, and health insurance information. The CE notified HHS, affected individuals, and the media, provided substitute notice, offered complimentary credit monitoring, and implemented additional safeguards including staff retraining.
Affected (this filing): 103,974
Uintah Basin Healthcare reported a data breach affecting 16 Maine residents. The breach, which occurred between October 25, 2022, and November 7, 2022, was discovered on April 7, 2023. The incident was described as an external system breach (hacking), and affected data includes names and Social Security numbers. Uintah Basin Healthcare offered 12 months of identity theft protection services through IDX.
Affected (this filing): 16
Uintah Basin Healthcare reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-12. The breach occurred during 10/25/2022 - 11/7/2022. The breach was discovered on 4/7/2023. 103,974 individuals were affected. Notice was sent on 5/10/2023.
Affected (this filing): 103,974
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.