MalwareHealthcareManufacturingHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowResolved
Nova Biomedical Corporation
bd_1070b12ea7b57a4b · schema v1 · pii pii-v1
Full breach record for Nova Biomedical Corporation →On July 22, 2025, Nova Biomedical Corp. experienced a sophisticated cybersecurity attack in which an unauthorized actor accessed the company's electronic infrastructure and deployed malware. The breach was discovered on December 18, 2025. A total of 10,764 individuals were affected, including 8 Maine residents. Affected individuals were notified on January 27, 2026. Nova offered 24-month Experian IdentityWorks credit monitoring to affected individuals.
Maine clockDiscovered Dec 18, 2025 → Filed with AG Jan 27, 202640d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_771cd35cb2ac3d49New Hampshire State AGfiled 2026-01-27Verified
- bd_f77c6edf443fc5d7Indiana State AGfiled 2026-01-27Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0c20e423-1a40-4380-8fe3-e4ddf1425aa2.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 27, 2026
- Raw hash
- 7618ce55231c7096659369f6e5362421b80b6477c4968ade89db4ce5469a1dda
Reporting entity
- Name
- Nova Biomedical Corporationnorm: nova biomedical
- Domain
- novabiomedical.com
- Industry
- Other Commercial
Victim entity
- Name
- Nova Biomedical Corporationnorm: nova biomedical
- Domain
- novabiomedical.com
- Industry
- Other Commercial
- Industry
- HealthcarellmManufacturingllm
Incident
- Discovered
- Dec 18, 2025
- Materiality determined
- —
- Notification sent
- Jan 27, 2026
- Affected individuals
- 8
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(40 days from discovery to filing)
- Compliance flags
- ME AG >30d · 40d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 18, 2025→ Filed with AG: Jan 27, 202640d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.