HackingHealthcareHealthcareCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Harney District Hospital
bd_38f46c78681664ba · schema v1 · pii pii-v1
Full breach record for Harney District Hospital →Harney District Hospital reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred and was discovered on November 22, 2021. The breach affected 1,126 Maine residents and compromised their names and Social Security numbers. The hospital offered twelve months of identity theft protection services through IDX to the affected individuals.
Maine clockDiscovered Nov 22, 2021 → Filed with AG Mar 21, 2022119d ✗ ME AG >90d17 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a807d4de8abd15fdOregon State AGfiled 2022-03-21Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a8eafc2f-3532-4394-9b9c-65e60a3fd716.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 21, 2022
- Raw hash
- fd483bdd1c363f9e9118699278d0dfeb546b2023fb90898cf7a4998219225cb0
Reporting entity
- Name
- Harney District Hospitalnorm: harney district hospital
Victim entity
- Name
- Harney District Hospitalnorm: harney district hospital
- Industry
- Healthcarellm
Incident
- Discovered
- Nov 22, 2021
- Materiality determined
- —
- Notification sent
- Mar 21, 2022
- Affected individuals
- 1,126
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- ME AG >90d · 119dME resident >60d · 119d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 22, 2021→ Filed with AG: Mar 21, 2022119d 90 days ME AG >90d Maine Discovered: Nov 22, 2021→ Notified: Mar 21, 2022119d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.