DisclosureLens
MalwareHealthcareHealthcareRansomwareRansom DemandedData EncryptedCustomer Data InvolvedLowResolved

Florida Heart Associates

bd_406b946c26f95da6 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 19, 2021

Filed

Jul 14, 2021

To disclose

8 weeks

Affected

39scope not determined

Linked

7 filings

Confidence

50%
Full breach record for Florida Heart Associates →

Florida Heart Associates, a healthcare organization, reported a data breach caused by a ransomware attack. The incident occurred between May 9, 2021, and May 19, 2021, and was discovered on the latter date. The breach affected 39 Maine residents.

Maine clockDiscovered May 19, 2021 → Filed with AG Jul 14, 202156d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 10 days
discovery → filing · 8 weeks / 56 days

May 9, 2021

Begins

May 19, 2021

Discovered

Jul 14, 2021

Filed

vs. sector median

5 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 16d gap

Filing propagation · 6 filings · 5 states

View merged incident ↗
HHS OCRJul 7 · first
Massachusetts State AG+6d
Montana State AG+6d
Maine State AG+7d · this page
Indiana State AG+10d
Maine State AG+23d

Pattern: first filing Jul 7 (FL), last Jul 30 (ME) — a 23-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.