HackingHealthcareHealthcareCustomer Data InvolvedTargetedPIIPHIIdentity (basic)LowContained

Medical Associates of Brevard, LLC

bd_00621575f72b9ba6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 7, 2025

Filed

Sep 5, 2025

To disclose

9 weeks

Affected

107state residents only

Linked

5 filings

Confidence

66%

Full breach record for Medical Associates of Brevard, LLC →2 incidents on file

Medical Associates of Brevard, LLC, a healthcare provider, reported an external system breach (hacking) occurring on January 17, 2025, discovered on July 7, 2025. The incident impacted PHI and PII, including names. 107 Maine residents were affected. The company engaged third-party experts, secured systems, and provided 12 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d9 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 171 days

discovery → filing · 9 weeks / 60 days

Jan 17, 2025

Begins

Jul 7, 2025

Discovered

Sep 5, 2025

Filed

vs. sector median

4 wks faster

This filing is one of 5 about the same incident.View merged incident

A leak claim by bianlian about this victim predates this filing by 231 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_931740a61e3ad4362025-09-05Verified by operator
HHS OCRbd_e893a194966d9bcd2025-09-05Verified by operator
Indiana State AGbd_edb62dd27b0c7f3f2025-09-05Verified by operator
New Hampshire State AGbd_1a02292581ce4e212025-09-09 · +4dVerified by operator

Name: Jackson Lewis
norm: jackson lewis
Domain: jacksonlewis.com

Name: Medical Associates of Brevard, LLC
norm: medical of brevard
Domain: mabmd.com
Industry: Healthcare
Industry: Healthcarellm

Discovered: Jul 7, 2025
Breach occurred: Jan 17, 2025
Undetected for: 171 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 5, 2025
Affected individuals: 107state-resident count only
Data types: PIIPHIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Took immediate steps to secure systems
Engaged third-party experts to investigate
Offered 12 months of free credit monitoring and ID restoration services through Experian
Changes made: Implemented additional security enhancements
Continues to regularly assess and strengthen security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 60d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 7, 2025
→ Filed with AG: Sep 5, 2025
60d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 7, 2025 → Filed with AG: Sep 5, 2025	60d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGSep 5 · first

HHS OCRSep 5 · first

Indiana State AGSep 5 · first

Maine State AGSep 5 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/97a9b516-d399-4f20-91d8-aead5498cc31.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 5, 2025
Raw hash: 5422955b7ed0dcba6ddfb4983c15589c4f9c101f996fdccb5bc442a6b2897e0d

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityJackson Lewis

Victim entityMedical Associates of Brevard, LLC

Incidentdiscovered Jul 7, 2025

Stated responseTook immediate steps to secure systems

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov