HackingCustomer Data InvolvedMediumContained
Healthcare
bd_2976d9ebf2d37285 · schema v1 · pii pii-v1
Full breach record for Healthcare →Healthcare Services Group, Inc. experienced an external system breach (hacking) on September 27, 2024, which was discovered on June 3, 2025. The breach affected 3,871 Maine residents. The company provided written notification to the affected individuals on August 25, 2025, and offered identity theft protection services.
Maine clockDiscovered Jun 3, 2025 → Filed with AG Aug 25, 202583d ⏱ ME AG >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,871 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9a82ac2b-5379-462d-acd6-26a3b3bd0b30.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 25, 2025
- Raw hash
- 576febd6e327b87244b1e6e35579dd5ffb06f3e896c6b3615e68791b8b91f4bc
Reporting entity
- Name
- Healthcarenorm: healthcare
- Domain
- healthcare.ascension.org
Victim entity
- Name
- Healthcarenorm: healthcare
- Domain
- healthcare.ascension.org
Incident
- Discovered
- Jun 3, 2025
- Materiality determined
- —
- Notification sent
- Aug 25, 2025
- Affected individuals
- 3,871
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 12 weeks(83 days from discovery to filing)
- Compliance flags
- ME AG >30d · 83dME resident >60d · 83d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 3, 2025→ Filed with AG: Aug 25, 202583d 30 days (soft) ME AG >30d Maine Discovered: Jun 3, 2025→ Notified: Aug 25, 202583d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.