HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)HighContained

Jewish Home Lifecare

bd_449b0581baa7fc4d · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 7, 2024

Filed

Aug 16, 2024

To disclose

32 weeks

Affected · nationwide

104,23422 in this filing

Linked

5 filings

Confidence

66%

Full breach record for Jewish Home Lifecare →5 incidents on file

Jewish Home Lifecare d/b/a The New Jewish Home reported an external system breach (hacking) on January 7, 2024, affecting 104,234 individuals. The breach involved unauthorized access to files containing names and other personal identifiers. The organization engaged third-party forensic specialists, strengthened network security, and provided 12 months of complimentary credit monitoring and identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 7, 2024 → Filed with AG Aug 16, 2024222d ✗ ME AG >90d32 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 32 weeks / 222 days

Jan 7, 2024

Begins

Jan 7, 2024

Discovered

Aug 16, 2024

Filed

vs. sector median

+19 wks slower

This filing is one of 5 about the same incident.View merged incident

A leak claim by alphv about this victim predates this filing by 189 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitealphvbd_251138c833a6ef122024-02-08 · +189dVerified by operator

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_243823483fc20fce2024-08-16Verified by operator
Vermont State AGbd_e5759e3479adceaa2024-08-16Verified by operator
HHS OCRbd_01b99bc6a61b59062024-03-08 · +161dVerified

Name: Jewish Home Lifecare
norm: jewish home lifecare
Domain: jewishhome.org

Name: Jewish Home Lifecare
norm: jewish home lifecare
Domain: jewishhome.org
Also named: Jewish Home Lifecaredba oflegal entity
The New Jewish Homedba oftrade name
Industry: Healthcarellm

Discovered: Jan 7, 2024
Breach occurred: Jan 7, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 16, 2024
Affected individuals: 104,234state + nationwide
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Began an investigation with the assistance of third-party forensic specialists
Conducted a full investigation into the incident
Took steps to strengthen our network security
Making complimentary credit monitoring services available to impacted individuals
Changes made: Took steps to strengthen our network security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(222 days from discovery to filing)
Compliance flags: ME AG >90d · 222dLeak >180dME resident >60d · 222d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 7, 2024
→ Filed with AG: Aug 16, 2024
222d 90 days ME AG >90d
Maine
Discovered: Jan 7, 2024
→ Notified: Aug 16, 2024
222d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 7, 2024 → Filed with AG: Aug 16, 2024	222d	90 days	ME AG >90d
Maine	Discovered: Jan 7, 2024 → Notified: Aug 16, 2024	222d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

HHS OCRMar 8 · first

Massachusetts State AG+161d

Vermont State AG+161d

Maine State AG+161d · this page

Pattern: first filing Mar 8 (NY), last Aug 16 (ME) — a 161-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/104a9372-53ba-4e49-ac64-2173412c0be1.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 16, 2024
Raw hash: 1dacae6c11a76161699cbfd86a8c843dab15c2d35aaae4aa73f2fe446b9d0300

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityJewish Home Lifecare

Victim entityJewish Home Lifecare

Incidentdiscovered Jan 7, 2024

Stated responseBegan an investigation with the assistance of third-party forensic specialists

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov