HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
McAlester Regional Health Center
bd_00762f4dda086948 · schema v1 · pii pii-v1
Full breach record for McAlester Regional Health Center →McAlester Regional Health Center, a healthcare provider in McAlester, Oklahoma, reported an external system breach (hacking) occurring between April 13 and April 24, 2023. The incident affected 37,731 individuals, including 4 Maine residents. The breach compromised names and Social Security Numbers. The company notified affected individuals in writing on November 15, 2023, and offered 12 months of credit monitoring and identity protection services.
Maine clockDiscovered May 8, 2023 → Filed with AG Nov 15, 2023191d ✗ ME AG >90d27 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by karakurt about this victim predates this filing by 110 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_6751323e8c15cad4Vermont State AGfiled 2023-11-15Verified
- bd_bd461962ac34b82eMontana State AGfiled 2023-11-15Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/168cea52-014b-4cbe-92be-4cb5c1fcc1ed.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 15, 2023
- Raw hash
- 02f2765b142354190654f588351276fb679327c2b3963893bccaccaa09ebaacf
Reporting entity
- Name
- McAlester Regional Health Centernorm: mcalester regional health center
- Domain
- mcalesterregional.com
Victim entity
- Name
- McAlester Regional Health Centernorm: mcalester regional health center
- Domain
- mcalesterregional.com
Incident
- Discovered
- May 8, 2023
- Materiality determined
- —
- Notification sent
- Nov 15, 2023
- Affected individuals
- 37,731
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 weeks(191 days from discovery to filing)
- Compliance flags
- ME AG >90d · 191dME resident >180d · 191dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 8, 2023→ Filed with AG: Nov 15, 2023191d 90 days ME AG >90d Maine Discovered: May 8, 2023→ Notified: Nov 15, 2023191d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.