HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
University Gastroenterology, Inc.
bd_030853e2745dcd4c · schema v1 · pii pii-v1
Full breach record for University Gastroenterology, Inc. →Gastroenterology Consultants P.A. reported an external system breach (hacking) occurring on January 10, 2021, affecting 162,163 individuals, including 1 Maine resident. The breach compromised names and Social Security Numbers. The entity notified affected individuals in writing on August 6, 2021, and provided 12 months of credit monitoring and identity theft restoration services through IDX.
Maine clockDiscovered Jan 10, 2021 → Filed with AG Aug 5, 2021207d ✗ ME AG >90d30 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_6b751ff38959a0bfMontana State AGfiled 2021-08-06(1d gap)Candidate
- bd_4155e21f1be7b2d3Maine State AGfiled 2021-08-09(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ac17c1c0-2a1b-4783-9078-d944d8c15adb.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 5, 2021
- Raw hash
- 5b0b1bb14ab873d3eeadc6275b22dd39428469ea99fabfd663a59c21c8477820
Reporting entity
- Name
- University Gastroenterology, Inc.norm: university gastroenterology
Victim entity
- Name
- University Gastroenterology, Inc.norm: university gastroenterology
Incident
- Discovered
- Jan 10, 2021
- Materiality determined
- —
- Notification sent
- Aug 6, 2021
- Affected individuals
- 162,163
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 30 weeks(207 days from discovery to filing)
- Compliance flags
- ME AG >90d · 207dME resident >180d · 208d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 10, 2021→ Filed with AG: Aug 5, 2021207d 90 days ME AG >90d Maine Discovered: Jan 10, 2021→ Notified: Aug 6, 2021208d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.