HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHigh
SAV-RX
bd_3dc61801e1d2468b · schema v1 · pii pii-v1
Full breach record for SAV-RX →A&A Services d/b/a Sav-Rx, a healthcare services company, reported a data breach that affected 5,935 residents of Maine. The breach was an external system hack that occurred on October 8, 2023, and was discovered on April 30, 2024. The compromised data included names and Social Security numbers. In response, the company began notifying affected individuals on May 24, 2024, and offered two years of complimentary credit monitoring and identity theft protection services.
Maine clockDiscovered Apr 30, 2024 → Filed with AG May 24, 202424d ✓ ME AG ≤30d24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5,935 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8912d568-e577-49a3-93ba-f9341533d332.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 24, 2024
- Raw hash
- ba9b8176c05d07182fac23545f1fa92370bfc22322515c0e5960a095f9ec4e70
Reporting entity
- Name
- SAV-RXnorm: sav rx
- Domain
- api.savrx.com
Victim entity
- Name
- SAV-RXnorm: sav rx
- Domain
- api.savrx.com
Incident
- Discovered
- Apr 30, 2024
- Materiality determined
- —
- Notification sent
- May 24, 2024
- Affected individuals
- 5,935
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 24d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 30, 2024→ Filed with AG: May 24, 202424d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.