Norwood Clinic
bd_07e480b31d57471b · schema v1 · pii pii-v1
Full breach record for Norwood Clinic →Norwood Clinic, a healthcare entity, reported a data breach affecting 7 Maine residents. The breach, which occurred on September 20, 2021, and was discovered on October 22, 2021, was the result of an external system breach (hacking). The compromised information included names in combination with driver's license or non-driver identification card numbers. Norwood Clinic offered affected individuals 12 months of credit monitoring, identity theft protection, and dark web monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 20, 2021
Begins
Oct 22, 2021
Discovered
Mar 8, 2022
Filed
vs. sector median
+7 wks slower
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Massachusetts State AGbd_709df235b87cf2a72022-03-08Verified
- Indiana State AGbd_cf1657c576f595362022-03-08Verified
- Montana State AGbd_eb8a2556fcfb2e892022-03-08Verified
- HHS OCRbd_66799050ac9aa4972022-02-25 · +11dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Feb 25 (TN), last Mar 8 (ME) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.