HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
INDIANA UNIVERSITY HEALTH, INC.
bd_3402840e461e692e · schema v1 · pii pii-v1
Full breach record for INDIANA UNIVERSITY HEALTH, INC. →Indiana University Health Foundation, Inc. reported an external system breach (hacking) occurring between February 7, 2020, and May 20, 2020, discovered on September 4, 2020. The incident affected 1,948 individuals, including one Maine resident. Personal information acquired included names and Social Security Numbers. The entity provided written notification and offered one year of credit monitoring and identity theft protection services through Experian.
Maine clockDiscovered Sep 4, 2020 → Filed with AG Sep 25, 202021d ✓ ME AG ≤30d21 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,948 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/18f5c16a-6ede-48d7-bd4e-3970a134af7e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 25, 2020
- Raw hash
- 89b7b9e9fe7bb8b48b7ac19fbdf3525e51937ab356781612b3517cdb19374a04
Reporting entity
- Name
- INDIANA UNIVERSITY HEALTH, INC.norm: indiana university health
Victim entity
- Name
- INDIANA UNIVERSITY HEALTH, INC.norm: indiana university health
Incident
- Discovered
- Sep 4, 2020
- Materiality determined
- —
- Notification sent
- Sep 25, 2020
- Affected individuals
- 1,948
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 21d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 4, 2020→ Filed with AG: Sep 25, 202021d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.