HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHIIDENTITY_GOVERNMENTMediumContained
Carolina Arthritis
bd_3e3faec2dc9622c0 · schema v1 · pii pii-v1
Full breach record for Carolina Arthritis →On September 27, 2024, Carolina Arthritis Associates, a rheumatology practice in Wilmington, NC, experienced a computer network disruption. Cybersecurity experts determined that certain files may have been acquired without authorization. The breach was discovered on January 21, 2025. Affected data for 3 Maine residents (36,961 total) may include name, date of birth, medical treatment/procedure information, medical record number, medical provider name, and Social Security number.
Maine clockDiscovered Jan 21, 2025 → Filed with AG Feb 27, 202537d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
A leak claim by threeam about this victim predates this filing by 125 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_afad31b5e423fe58Leak Sitethreeamfiled 2024-10-24(125d gap)Verified
Regulatory filings (5) · sorted by filing gap
- bd_25b183630cee6006New Hampshire State AGfiled 2025-02-27Verified
- bd_47d1979d018b1d02HHS OCRfiled 2025-02-27Verified
- bd_5c4c73fe34204471Vermont State AGfiled 2025-02-27Verified
- bd_7f5415b879da3317Indiana State AGfiled 2025-02-27Verified
Show 1 more filing ↓Show fewer ↑
- bd_8076b43f1a07995dMaryland State AGfiled 2025-02-27Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/22481eb7-c426-4244-9613-09ab738b2fd2.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2025
- Raw hash
- 0b0a48784e2ff36d7ee80a34ff33a7eb5ed45cd1b77396aedd92cdaba7de3f3e
Reporting entity
- Name
- Carolina Arthritisnorm: carolina arthritis
- Domain
- carolinaarthritis.com
- Industry
- Healthcare
Victim entity
- Name
- Carolina Arthritisnorm: carolina arthritis
- Domain
- carolinaarthritis.com
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jan 21, 2025
- Materiality determined
- —
- Notification sent
- Feb 27, 2025
- Affected individuals
- 3
- Data types
- PIIPHIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Reported incident to FBI
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- ME AG >30d · 37dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 21, 2025→ Filed with AG: Feb 27, 202537d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.