HackingHealthcareHealthcareDelayed DiscoveryCustomer Data InvolvedPIIPHILowResolved
Carespring Health Care Management LLC
bd_3515140b05c45d59 · schema v1 · pii pii-v1
Full breach record for Carespring Health Care Management LLC →Carespring Health Care Management LLC, a healthcare organization in Loveland, OH, reported an external system breach (hacking) that occurred between October 12 and October 30, 2023. The breach was not discovered until July 16, 2024. A total of 76,719 individuals were affected nationwide, with 2 Maine residents affected. Notification was sent electronically on August 15, 2024. Affected individuals were offered 12 months of Kroll Identity Monitoring Services.
Leak gap clock✗ Leak >180d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
A leak claim by hunters_international about this victim predates this filing by 293 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_887aaa3e9b883362Leak Sitehunters_internationalfiled 2024-02-10(187d gap)Verified by operator
- bd_bf7e6dc806de2ce9Leak Sitenoescapefiled 2023-11-10(280d gap)Verified
Regulatory filings (4) · sorted by filing gap
- bd_b1b6cf27a3455f12Vermont State AGfiled 2024-08-15(1d gap)Verified
- bd_c7f24252bf65f76bNew Hampshire State AGfiled 2024-08-19(3d gap)Verified
- bd_e21a0c9a61ebb45dMaine State AGfiled 2024-09-09(24d gap)Verified
- bd_e34bff3cc918e147Vermont State AGfiled 2024-09-10(25d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/90c3b046-93bc-4c4d-84d9-590cd19eb6a3.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 16, 2024
- Raw hash
- 9ca0504dc548082fc209b86493574c164eae9a6dc1bb7b2b815007050d6dfee2
Reporting entity
- Name
- Carespring Health Care Management LLCnorm: carespring health care management
- Domain
- carespring.com
- Industry
- Healthcare
Victim entity
- Name
- Carespring Health Care Management LLCnorm: carespring health care management
- Domain
- carespring.com
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jul 16, 2024
- Materiality determined
- —
- Notification sent
- Aug 15, 2024
- Affected individuals
- 2
- Data types
- PIIPHI
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney General
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 31d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 16, 2024→ Filed with AG: Aug 16, 202431d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.