HackingHealthcareHealthcareBusiness Associate (HIPAA)Customer Data InvolvedIDENTITY_GOVERNMENTMediumContained
Intermountain Health
bd_01260dd1d26fd5bc · schema v1 · pii pii-v1
Full breach record for Intermountain Health →Intermountain Healthcare, acting as a business associate, reported an external hacking incident that occurred on April 6, 2021, and was discovered on May 17, 2021. The breach affected 2 Maine residents, compromising their names and driver's license or non-driver ID card numbers. Intermountain Healthcare provided written notification to the affected individuals on July 16, 2021, and offered one year of credit monitoring and identity restoration services through Experian.
Maine clockDiscovered May 17, 2021 → Filed with AG Jul 16, 202160d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_11eb24756b861340HHS OCRfiled 2021-07-16Verified
- bd_e3a75470d2cc82bcMontana State AGfiled 2021-07-16Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/afb9426a-b86c-4453-8529-3c27331dbe56.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 16, 2021
- Raw hash
- bd2ae01a05445fac8844cb62b5295af6f39f4b9f1acd4240ffc636f291b2d797
Reporting entity
- Name
- Intermountain Healthnorm: intermountain health
- Domain
- intermountainhealthcare.org
Victim entity
- Name
- Intermountain Healthnorm: intermountain health
- Domain
- intermountainhealthcare.org
- Industry
- Healthcarellm
Incident
- Discovered
- May 17, 2021
- Materiality determined
- —
- Notification sent
- Jul 16, 2021
- Affected individuals
- 2
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- ME AG >30d · 60d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 17, 2021→ Filed with AG: Jul 16, 202160d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.