DisclosureLens
HackingHealthcareHealthcareFinancial accountMediumResolved

New Horizons Medical

bd_21b6640148a7de43 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 19, 2023

Filed

Jun 16, 2023

To disclose

28 days

Affected · nationwide

12,3179 in this filing

Linked

9 filings

Confidence

50%
Full breach record for New Horizons Medical

New Horizons Medical, Inc. experienced an external system breach that occurred from February 12, 2023, to April 23, 2023. The breach was discovered on May 19, 2023. The compromised information includes names combined with financial account numbers or credit/debit card numbers, along with their respective security codes or PINs. A total of 12,317 individuals were affected, including 9 residents of Maine. Affected individuals were notified on June 16, 2023, and were offered one year of credit monitoring and identity theft protection services through Equifax.

Maine clockDiscovered May 19, 2023Filed with AG Jun 16, 202328d ME AG ≤30d28 days discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 96 days
discovery → filing · 28 days

Feb 12, 2023

Begins

May 19, 2023

Discovered

Jun 16, 2023

Filed

vs. sector median

9 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (4)

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 4 states

View merged incident ↗
Massachusetts State AGJun 16 · first
Vermont State AGJun 16 · first
HHS OCRJun 16 · first
New Hampshire State AGJun 16 · first
Maine State AGJun 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.