HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryMediumResolved

Medical Associates of Brevard, LLC

bd_336386adde25a7cf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 7, 2025

Filed

Oct 10, 2025

To disclose

14 weeks

Affected

1,000scope not determined

Linked

8 records

Confidence

88%

Full breach record for Medical Associates of Brevard, LLC →

Medical Associates of Brevard, LLC (Melbourne, FL) reported an external system breach (hacking) to the Maine AG. The breach occurred on January 17, 2025 and was discovered on July 7, 2025. Approximately 1,000 Maine residents were affected. Consumer notifications were sent on September 5, 2025. Identity theft protection services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d14 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 171 days

discovery → filing · 14 weeks / 95 days

Jan 17, 2025

Begins

Jul 7, 2025

Discovered

Oct 10, 2025

Filed

vs. sector median

+5 wks slower

This filing is one of 8 records about the same incident.View merged incident

A leak claim by bianlian about this victim was first seen 250 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebianlianbd_f99356991afe3af42025-01-17 · +266dVerified by operator

Regulatory filings (6) · sorted by filing gap

New Hampshire State AGbd_1a02292581ce4e212025-09-09 · +31dVerified by operator
Maine State AGbd_00621575f72b9ba62025-09-05 · +35dVerified by operator
Montana State AGbd_931740a61e3ad4362025-09-05 · +35dVerified by operator
HHS OCRbd_e893a194966d9bcd2025-09-05 · +35dVerified by operator

Show 2 more filings ↓up to 35d gap

Indiana State AGbd_edb62dd27b0c7f3f2025-09-05 · +35dVerified by operator
Nebraska State AGbd_f5b2ee2c40dbf9572025-09-05 · +35dVerified by operator

Name: Medical Associates of Brevard, LLC
norm: medical of brevard
Domain: mabmd.com
Industry: Healthcare

Name: Medical Associates of Brevard, LLC
norm: medical of brevard
Domain: mabmd.com
Industry: Healthcare
Industry: Healthcarellm

Discovered: Jul 7, 2025
Breach occurred: Jan 17, 2025
Undetected for: 171 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 5, 2025
Affected individuals: 1,000scope not determined
Data types: —
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Identity theft protection services offered
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(95 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 95d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 7, 2025
→ Filed with AG: Oct 10, 2025
95d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 7, 2025 → Filed with AG: Oct 10, 2025	95d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Maine State AGSep 5 · first

Montana State AGSep 5 · first

HHS OCRSep 5 · first

Indiana State AGSep 5 · first

Nebraska State AGSep 5 · first

New Hampshire State AG+4d

Maine State AG+35d · this page

Pattern: first filing Sep 5 (ME), last Oct 10 (ME) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/af9c1cf6-2f8f-41cd-bf86-43e88cc105a3.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 10, 2025
Raw hash: 7efb14e437bad268a92a7739e1d449af4940120127a255b91f8a7c94f762af6d

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityMedical Associates of Brevard, LLC

Victim entityMedical Associates of Brevard, LLC

Incidentdiscovered Jul 7, 2025

Stated responseIdentity theft protection services offered

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov