Social EngineeringPhishingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHigh
WellDyneRx
bd_4625bcab516f5e26 · schema v1 · pii pii-v1
Full breach record for WellDyneRx →WellDyneRx, LLC reported an email phishing incident that affected 38,401 individuals. The breach occurred between October 30, 2021, and November 17, 2021, and was discovered on March 11, 2022. The compromised information included names and driver's license numbers. WellDyneRx provided written notifications to affected individuals starting on June 22, 2022, and offered identity theft protection services.
Maine clockDiscovered Mar 11, 2022 → Filed with AG Jul 2, 2022113d ✗ ME AG >90d16 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_7b8306e67365da35HHS OCRfiled 2022-07-01(1d gap)Verified
- bd_fbaf98a01ac90a99California State AGfiled 2022-07-01(1d gap)Verified
- bd_2ee19810ce6ea44bMaine State AGfiled 2022-05-26(37d gap)Candidate
- bd_88d8ea977b4ab7dcMontana State AGfiled 2022-05-26(37d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2f4e025b-3f3a-4bca-901b-293e23a513a9.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 2, 2022
- Raw hash
- 15fb1249948e58ea35de76060ae33276a46b8737bf47df742d4bafb89ee4724f
Reporting entity
- Name
- WellDyneRxnorm: welldynerx
Victim entity
- Name
- WellDyneRxnorm: welldynerx
Incident
- Discovered
- Mar 11, 2022
- Materiality determined
- —
- Notification sent
- Jun 22, 2022
- Affected individuals
- 38,401
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 Phishing
- Threat actor
- External
Compliance
- Time to disclose
- 16 weeks(113 days from discovery to filing)
- Compliance flags
- ME AG >90d · 113dME resident >60d · 103d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 11, 2022→ Filed with AG: Jul 2, 2022113d 90 days ME AG >90d Maine Discovered: Mar 11, 2022→ Notified: Jun 22, 2022103d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.