HackingCustomer Data InvolvedData ExfiltratedLowContained
Western Montana Mental Health Center
bd_154ae35704eb4331 · schema v1 · pii pii-v1
Full breach record for Western Montana Mental Health Center →Western Montana Mental Health Center, a healthcare organization, reported a data breach to the Maine Attorney General. The breach, described as an external system breach (hacking), occurred on September 11, 2024, and was discovered on May 27, 2025. The incident affected 6 Maine residents. The company began notifying affected individuals on July 17, 2025, and offered 12 months of identity theft protection services through IDX.
Maine clockDiscovered May 27, 2025 → Filed with AG Jul 18, 202552d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_c165bdbada433eaeNew Hampshire State AGfiled 2025-07-18Verified
- bd_302a8478f032d5e0Montana State AGfiled 2025-07-17(1d gap)Candidate
- bd_48f24baf2ecae00eVermont State AGfiled 2025-07-17(1d gap)Verified
- bd_6ec13e1ebb9b4d08Indiana State AGfiled 2025-07-17(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/eddb74c4-b969-4fd8-8e71-4b9f003095bd.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 18, 2025
- Raw hash
- 68443148c18d12ec29310ae0710afdaf8210fcb65facccd1603fb9b3e8774bb3
Reporting entity
- Name
- Western Montana Mental Health Centernorm: western montana mental health center
Victim entity
- Name
- Western Montana Mental Health Centernorm: western montana mental health center
Incident
- Discovered
- May 27, 2025
- Materiality determined
- —
- Notification sent
- Jul 17, 2025
- Affected individuals
- 6
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- ME AG >30d · 52d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 27, 2025→ Filed with AG: Jul 18, 202552d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.