HackingBusiness Associate (HIPAA)Customer Data InvolvedDownstream VictimsSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
CareSouth Carolina, Inc.
bd_448e0719ccdbc3aa · schema v1 · pii pii-v1
Full breach record for CareSouth Carolina, Inc. →CareSouth Carolina, Inc. reported a data breach impacting 6 Maine residents, which was discovered on November 24, 2020. The breach was a result of an external system breach (hacking) that occurred on November 12, 2020 at their business associate, Netgain Technology, Inc. The compromised information includes names and Social Security numbers. Affected individuals were notified on May 17, 2021, and offered 12 months of identity theft protection services through IDX.
Maine clockDiscovered Nov 24, 2020 → Filed with AG May 14, 2021171d ✗ ME AG >90d24 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8b5cbdb124c94c8dHHS OCRfiled 2021-05-14Verified
- bd_ea98627dd6e25b0bSouth Carolina State AGfiled 2021-05-14Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a3b1af4b-1ebb-4609-a267-bfd504f07e70.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 14, 2021
- Raw hash
- 613950768f2f2f7b49b96aa007977de4cb75987138274c0f2acbf3de4b7e1f94
Reporting entity
- Name
- CareSouth Carolina, Inc.norm: caresouth carolina
- Domain
- caresouth-carolina.com
Victim entity
- Name
- CareSouth Carolina, Inc.norm: caresouth carolina
- Domain
- caresouth-carolina.com
Incident
- Discovered
- Nov 24, 2020
- Materiality determined
- —
- Notification sent
- May 17, 2021
- Affected individuals
- 6
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 24 weeks(171 days from discovery to filing)
- Compliance flags
- ME AG >90d · 171dME resident >60d · 174d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 24, 2020→ Filed with AG: May 14, 2021171d 90 days ME AG >90d Maine Discovered: Nov 24, 2020→ Notified: May 17, 2021174d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.