Regulator-posted notice

Breach notice filed by Bristol Myers Squibb Co and Bristol Myers Squibb Patient Assistance Foundation (May 2024)

Organization named: Bristol Myers Squibb Co and Bristol Myers Squibb Patient Assistance Foundation Provisional: identity as filed, not yet matched to the directory

What the sources say

Indiana data breach year-to-date reports Primary notice

Listed in the Indiana Attorney General's data breach report for 2024 with a notification date of May 17, 2024.

Organization as reported: Bristol Myers Squibb Co and Bristol Myers Squibb Patient Assistance Foundation
Incident dates as reported: Feb. 21, 2024
Notification date: May 17, 2024
Observed by BreachRecords: 2026-10-19 04:58 UTC (revision 38498, pdf:2024:page:6:row:189)
Archived copy: Held in the private archive (provenance)

The listing records a filing with the agency; it is not a finding by the agency.

Figures, per source

78,516 individuals affected (Indiana residents), according to the Indiana Attorney General's data breach reports, source date May 17, 2024, revision observed 2026-10-19.

Each figure is one source's figure with the basis that source gave. Figures from different sources are shown side by side and are not added, averaged or chosen between.

Timeline

Source dates are the dates the sources give. Observation dates are when BreachRecords recorded each revision.

2024-05-17Notification date (Indiana Attorney General)
2026-10-19Observed by BreachRecords (revision 38498)
2026-10-21Approved by a reviewer

Organizations linked by a reviewer

Bristol Myers Squibb Co and Bristol Myers Squibb Patient Assistance Foundation Named as the filer Provisional: identity as filed, not yet matched to the directory Linked 2026-10-19, method provisional.

Archived evidence

1cf57cd5249ea410ee94c20034bffbdfac1a31730e78b9b1689268a337a01965
application/pdf, 979,138 bytes, retrieved from Indiana Attorney General, 2026-10-19 04:58 UTC. Archived privately · Provenance · Source page

Records reflect source filings as of the dates shown. BreachRecords is not a regulator.

Request a correction

A record that disagrees with its source, names the wrong organization or duplicates another is corrected after review. This form is about Breach notice filed by Bristol Myers Squibb Co and Bristol Myers Squibb Patient Assistance Foundation (May 2024). We acknowledge every request within two business days. We reply by email.

The form is being set up. Check back soon.