MalwareHealthcareHealthcareRansomwareData EncryptedRansom DemandedCustomer Data InvolvedDelayed DiscoveryPHIPIILowResolved
Florida Community Health Centers
bd_124b917ef0b00e64 · schema v1 · pii pii-v1
Full breach record for Florida Community Health Centers →FCHC, a Florida healthcare provider, suffered a ransomware incident on June 13, 2023. Forensic investigation (concluded Oct 12, 2023) found unauthorized access to patient health information. Data mining review (completed Apr 2024) identified 63 ME residents among 296,635 total affected. Individuals notified July 1, 2024 with 12 months Cyberscout credit monitoring offered.
Maine clockDiscovered Jun 13, 2023 → Filed with AG Jul 1, 2024384d ✗ ME AG >90d13 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0e4d1a601747b1e3Indiana State AGfiled 2024-07-01Verified
- bd_3d1f8da21ff4c2f8Montana State AGfiled 2024-07-01Verified
- bd_97ee01f6efeaee74New Hampshire State AGfiled 2024-07-05(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/df1d9ed8-efbd-4c51-87e0-d797c7ce77f5.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2024
- Raw hash
- 0a95d0c65074510f79ad383df1e6f2b9b8dd096704060cdf4ff6d42140c00666
Reporting entity
- Name
- Florida Community Health Centersnorm: florida community health centers
- Industry
- Healthcare
Victim entity
- Name
- Florida Community Health Centersnorm: florida community health centers
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jun 13, 2023
- Materiality determined
- Oct 12, 2023
- Notification sent
- Jul 1, 2024
- Affected individuals
- 63
- Data types
- PHIPII
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notification filed with Maine Attorney General on July 1, 2024
Compliance
- Time to disclose
- 13 months(384 days from discovery to filing)
- Compliance flags
- ME AG >90d · 384dME resident >180d · 384d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 13, 2023→ Filed with AG: Jul 1, 2024384d 90 days ME AG >90d Maine Discovered: Jun 13, 2023→ Notified: Jul 1, 2024384d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.