HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICLowResolved
Naval Continuing Care Retirement Foundation, Inc.
bd_254766dbeece2208 · schema v1 · pii pii-v1
Full breach record for Naval Continuing Care Retirement Foundation, Inc. →Fleet Landing (Naval Continuing Care Retirement Foundation, Inc.) experienced an external system breach between September 11–12, 2024. An unauthorized actor gained access to the network and accessed or acquired certain data. The breach was discovered on September 11, 2025, after a thorough investigation. Eight Maine residents were among 7,509 total individuals affected. Complimentary 12-month credit monitoring and identity protection services were offered through Haystack ID.
Maine clockDiscovered Sep 11, 2025 → Filed with AG Nov 7, 202557d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed8 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5688172c-e794-42c6-92c4-904658e3d515.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 7, 2025
- Raw hash
- db819f2dd2cd5ed0d90800d97eed0142d5de1d35fcc33d93732ad8f140594966
Reporting entity
- Name
- Naval Continuing Care Retirement Foundation, Inc.norm: naval continuing care retirement
- Industry
- Healthcare
Victim entity
- Name
- Naval Continuing Care Retirement Foundation, Inc.norm: naval continuing care retirement
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Sep 11, 2025
- Materiality determined
- —
- Notification sent
- Nov 4, 2025
- Affected individuals
- 8
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcement
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- ME AG >30d · 57d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 11, 2025→ Filed with AG: Nov 7, 202557d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.