DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)MediumActive

Mount Desert Island Hospital

bd_044b7cb6e8c5de74 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 4, 2023

Filed

Jul 14, 2023

To disclose

10 weeks

Affected

Not disclosed

Linked

11 filings

Confidence

65%
Full breach record for Mount Desert Island Hospital

Mount Desert Island Hospital, Inc. notified the NH AG of a data security incident. Unauthorized access occurred between April 28 and May 7, 2023. MDIH became aware on May 4, 2023. The investigation is ongoing. Impacted data includes names combined with SSNs or health info for employees, dependents, beneficiaries, and patients. Law enforcement was notified. IDX Identity Monitoring was offered.

Leak gap clock Leak >30d10 weeks discovery → filing

Incident timeline

undetected · 6 days
discovery → filing · 10 weeks / 71 days

Apr 28, 2023

Begins

May 4, 2023

Discovered

Jul 14, 2023

Filed

vs. sector median

2 wks faster

This filing is one of 11 about the same incident.View merged incident
A leak claim by dispossessor about this victim predates this filing by 41 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Regulatory filings (8) · sorted by filing gap

Show 4 more filingsup to 67d gap

Filing propagation · 9 filings · 6 states

View merged incident ↗

Pattern: first filing Jun 5 (IN), last Sep 19 (ME) — a 106-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.