HackingHealthcareHealthcareCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHILowResolved
Albany Gastroenterology Consultants
bd_410857a31c2b7043 · schema v1 · pii pii-v1
Full breach record for Albany Gastroenterology Consultants →Albany Gastroenterology Consultants, a gastroenterology practice in Albany, NY, experienced an external system breach (hacking) on or about November 10, 2024, discovered November 19, 2024. An unknown actor accessed and acquired personal information without authorization. The investigation, completed September 17, 2025, confirmed scope. 57,751 individuals total were affected, including 17 Maine residents. IDX credit monitoring (12 months) was offered. The incident was reported to the FBI.
Maine clockDiscovered Nov 19, 2024 → Filed with AG Sep 23, 2025308d ✗ ME AG >90d44 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_286801adc2c36db7Vermont State AGfiled 2025-01-28(238d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/10037b37-cf13-4b1f-83ba-c06e843359ea.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 23, 2025
- Raw hash
- cc77e18a63c62ad01f7be400fcd029d610cb35b187792a577436030c744bfb24
Reporting entity
- Name
- Albany Gastroenterology Consultantsnorm: albany gastroenterology consultants
- Industry
- Healthcare
Victim entity
- Name
- Albany Gastroenterology Consultantsnorm: albany gastroenterology consultants
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Nov 19, 2024
- Materiality determined
- —
- Notification sent
- Sep 23, 2025
- Affected individuals
- 17
- Data types
- PIIPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- FBI
Compliance
- Time to disclose
- 44 weeks(308 days from discovery to filing)
- Compliance flags
- ME AG >90d · 308dME resident >180d · 308d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 19, 2024→ Filed with AG: Sep 23, 2025308d 90 days ME AG >90d Maine Discovered: Nov 19, 2024→ Notified: Sep 23, 2025308d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.