HackingHealthcareHealthcareSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
MULTICARE HEALTH SYSTEM
bd_030edbbc365276bf · schema v1 · pii pii-v1
Full breach record for MULTICARE HEALTH SYSTEM →MultiCare Health System, Inc. reported a data breach to the Maine Attorney General, which was discovered on September 30, 2022. The breach, an external system hacking incident that occurred on May 18, 2022, affected 3 Maine residents. The compromised information included names and Social Security numbers. In response, MultiCare offered two years of Equifax credit monitoring services to the individuals affected. The notification to consumers was sent on October 25, 2022. The breach was reported by outside counsel representing a service provider involved in the incident.
Maine clockDiscovered Sep 30, 2022 → Filed with AG Dec 12, 202273d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by everest about this victim predates this filing by 67 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (3)
- bd_8248169664840bfaLeak Siteeverestfiled 2023-04-07(116d gap)Verified by operator
- bd_d70f8071a41177afLeak Siteeverestfiled 2022-10-18(55d gap)Verified
- bd_6e8c8b71c76a579aLeak Siteeverestfiled 2022-10-06(67d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_77989f71442250e6Washington State AGfiled 2022-07-25(140d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ba3a712b-fd52-4b53-804c-22c7af5ef5f7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2022
- Raw hash
- 3d8754812fc5856eb9fa4f08869a86b50c837f87f268f639ac61995f9bbf7b80
Reporting entity
- Name
- MULTICARE HEALTH SYSTEMnorm: multicare health system
- Domain
- multicare.org
Victim entity
- Name
- MULTICARE HEALTH SYSTEMnorm: multicare health system
- Domain
- multicare.org
- Industry
- Healthcarellm
Incident
- Discovered
- Sep 30, 2022
- Materiality determined
- —
- Notification sent
- Oct 25, 2022
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- ME AG >30d · 73dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 30, 2022→ Filed with AG: Dec 12, 202273d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.