HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryPIILowResolved
Northwestern Community Services Board
bd_41ecf0cc0e0f49fa · schema v1 · pii pii-v1
Full breach record for Northwestern Community Services Board →Northwestern Community Services Board, a healthcare organization based in Front Royal, VA, experienced an external system breach (hacking) on July 18, 2024. The breach was not discovered until May 12, 2025 — nearly 10 months later. A total of 15,663 individuals were affected, including 7 Maine residents. Consumer notifications were sent on July 7, 2025. TransUnion credit monitoring and identity theft protection were offered for 12 months.
Leak gap clock✗ Leak >180d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by blacksuit about this victim predates this filing by 333 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_063687f57d6149acLeak Siteblacksuitfiled 2024-08-24(316d gap)Verified
- bd_fee68d96c9bab8e1Leak Siteblacksuitfiled 2024-08-08(333d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/20276fc8-efca-4643-9a0e-271b060eca60.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2025
- Raw hash
- e31b534b995cf5614636914f32114ed6eba2d890cbd9a59affab8ad3f3b6d271
Reporting entity
- Name
- Northwestern Community Services Boardnorm: northwestern community services board
- Domain
- nwcsb.com
- Industry
- Healthcare
Victim entity
- Name
- Northwestern Community Services Boardnorm: northwestern community services board
- Domain
- nwcsb.com
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- May 12, 2025
- Materiality determined
- —
- Notification sent
- Jul 7, 2025
- Affected individuals
- 7
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 56d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 12, 2025→ Filed with AG: Jul 7, 202556d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.