HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Coro Medical, LLC
bd_106f38bbc3306951 · schema v1 · pii pii-v1
Full breach record for Coro Medical, LLC →Coro Medical, LLC reported an external system breach (hacking) occurring on April 17, 2020, discovered on June 22, 2021. The incident affected 5,483 individuals, including 42 Maine residents. Compromised data included names and financial account or credit/debit card numbers (with security codes/PINs). The company provided written notification and offered 12 months of credit monitoring and identity protection services via TransUnion.
Maine clockDiscovered Jun 22, 2021 → Filed with AG Aug 27, 202166d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5,483 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/247dc087-0492-496a-8c59-72e8456aabf1.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 27, 2021
- Raw hash
- 45d7513cd659ead69bfca1173d15c3e3daa8f5508e2bde0fed4ba7586fa8fb51
Reporting entity
- Name
- Coro Medical, LLCnorm: coro medical
- Domain
- coromed.us
Victim entity
- Name
- Coro Medical, LLCnorm: coro medical
- Domain
- coromed.us
Incident
- Discovered
- Jun 22, 2021
- Materiality determined
- —
- Notification sent
- Aug 27, 2021
- Affected individuals
- 5,483
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- ME AG >30d · 66dME resident >60d · 66d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 22, 2021→ Filed with AG: Aug 27, 202166d 30 days (soft) ME AG >30d Maine Discovered: Jun 22, 2021→ Notified: Aug 27, 202166d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.