DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDMediumContained

National Association of Community Health Centers

bd_3e77cb306d9cd7b4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 16, 2021

Filed

Jan 7, 2022

To disclose

12 weeks

Affected · nationwide

9352 in this filing

Linked

3 filings

Confidence

50%
Full breach record for National Association of Community Health Centers →

National Association of Community Health Centers (NACHC) reported an external system breach that occurred on October 4, 2021, and was discovered on October 16, 2021. The breach affected 2 Maine residents, compromising their names and Social Security numbers. NACHC offered affected individuals 24 months of credit and identity monitoring services.

Maine clockDiscovered Oct 16, 2021 → Filed with AG Jan 7, 202283d ⏱ ME AG >30d12 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 12 days
discovery → filing · 12 weeks / 83 days

Oct 4, 2021

Begins

Oct 16, 2021

Discovered

Jan 7, 2022

Filed

vs. sector median

+3 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
New Hampshire State AGJan 7 · first
Maine State AGJan 7 · first · this page
Indiana State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.