Social EngineeringHealthcareHealthcarePhishingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryPIILowContained
Maryville College
bd_107d964e0ef402e7 · schema v1 · pii pii-v1
Full breach record for Maryville College →Maryville, Inc. (Maryville Addiction Treatment Center), a healthcare organization in Voorhees, NJ, discovered on August 26, 2024 that an unauthorized individual had gained access to an employee email account and used it to send phishing emails between May 2–6, 2024. The account was reviewed and potentially affected personal information was identified. 2 Maine residents were affected. No identity theft protection services were offered.
Maine clockDiscovered Aug 26, 2024 → Filed with AG Oct 11, 202446d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/404d3808-7f03-4338-8925-63da6499a00e.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 11, 2024
- Raw hash
- 26cfaba1d92b5cc4ce6761e62acf7c03671f888671e00ae4a9cdba153f43b996
Reporting entity
- Name
- Maryville Collegenorm: maryville college
- Domain
- maryvillenj.org
- Industry
- Healthcare
Victim entity
- Name
- Maryville Collegenorm: maryville college
- Domain
- maryvillenj.org
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Aug 26, 2024
- Materiality determined
- —
- Notification sent
- Sep 25, 2024
- Affected individuals
- 2
- Data types
- PII
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 PhishingT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 7 weeks(46 days from discovery to filing)
- Compliance flags
- ME AG >30d · 46d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 26, 2024→ Filed with AG: Oct 11, 202446d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.