DisclosureLens
HackingHealthcareHealthcareBusiness Associate (HIPAA)Customer Data InvolvedGovernment IDHighContained

Intermountain Health

bd_01260dd1d26fd5bc · schema v1 · pii pii-v1

Severity

High

Discovered

May 17, 2021

Filed

Jul 16, 2021

To disclose

9 weeks

Affected · nationwide

28,6282 in this filing

Linked

6 filings

Confidence

75%
Full breach record for Intermountain Health →2 incidents on file

Intermountain Healthcare, acting as a business associate, reported an external hacking incident that occurred on April 6, 2021, and was discovered on May 17, 2021. The breach affected 2 Maine residents, compromising their names and driver's license or non-driver ID card numbers. Intermountain Healthcare provided written notification to the affected individuals on July 16, 2021, and offered one year of credit monitoring and identity restoration services through Experian.

Maine clockDiscovered May 17, 2021 → Filed with AG Jul 16, 202160d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 41 days
discovery → filing · 9 weeks / 60 days

Apr 6, 2021

Begins

May 17, 2021

Discovered

Jul 16, 2021

Filed

vs. sector median

4 wks faster

This filing is one of 6 about the same incident.View merged incident
Part of Elekta supply-chain incident (2021) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 6d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
HHS OCRJul 16 · first
Indiana State AGJul 16 · first
Massachusetts State AGJul 16 · first
Montana State AGJul 16 · first
Maine State AGJul 16 · first · this page
New Hampshire State AG+6d

Pattern: first filing Jul 16 (UT), last Jul 22 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.