HackingCustomer Data InvolvedData ExfiltratedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMedium
Mount Desert Island Hospital
bd_437493e24886ba99 · schema v1 · pii pii-v1
Full breach record for Mount Desert Island Hospital →Mount Desert Island Hospital, Inc. experienced an external system breach that was discovered on June 21, 2023. The breach, which occurred on April 28, 2023, impacted 25,937 individuals. The compromised information included names in combination with financial account numbers or credit/debit card numbers and their associated security codes or PINs. The hospital began notifying affected individuals on June 30, 2023, and offered 12 months of credit monitoring and identity protection services.
Leak gap clock⏱ Leak >30d26 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by dispossessor about this victim predates this filing by 44 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_044b7cb6e8c5de74New Hampshire State AGfiled 2023-07-14(3d gap)Verified
- bd_d67d09f2ab8c5b20Montana State AGfiled 2023-07-14(3d gap)Candidate
- bd_529604a4efb3f8f5Vermont State AGfiled 2023-06-30(17d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/de93584a-6040-4e49-8ec8-b276479c95a2.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 17, 2023
- Raw hash
- 91df15ca7ad77ad413d6c75ab50a6af25a11b79779d17cb618e7356e0b29afeb
Reporting entity
- Name
- Mount Desert Island Hospitalnorm: mount desert island hospital
- Domain
- mdihospital.org
Victim entity
- Name
- Mount Desert Island Hospitalnorm: mount desert island hospital
- Domain
- mdihospital.org
Incident
- Discovered
- Jun 21, 2023
- Materiality determined
- —
- Notification sent
- Jun 30, 2023
- Affected individuals
- 25,937
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- Leak >30dME AG ≤30d · 26d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 21, 2023→ Filed with AG: Jul 17, 202326d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.