HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Three Rivers Provider Network
bd_462f0f4c5aee53c8 · schema v1 · pii pii-v1
Full breach record for Three Rivers Provider Network →Three Rivers Provider Network experienced an external system breach (hacking) on 06/02/2022, discovered on 08/17/2022. The incident compromised names and Social Security Numbers of 16,584 individuals, including 6 Maine residents. Written notification was sent on 10/15/2022, offering 24 months of Equifax Complete Premier identity protection services.
Maine clockDiscovered Aug 17, 2022 → Filed with AG Jul 21, 2023338d ✗ ME AG >90d48 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1135fa5e115212d4California State AGfiled 2023-07-21Candidate
- bd_b43d57a3b1062d1dNew Hampshire State AGfiled 2023-07-28(7d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/09e11f3f-74aa-485f-a45e-081be2bd9f87.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 21, 2023
- Raw hash
- c10c197e0d7a537a0723588e8c00ac1ddd300afd52d0b5cb4cb405bb1ea5b8f1
Reporting entity
- Name
- Three Rivers Provider Networknorm: three rivers provider network
Victim entity
- Name
- Three Rivers Provider Networknorm: three rivers provider network
Incident
- Discovered
- Aug 17, 2022
- Materiality determined
- —
- Notification sent
- Oct 15, 2022
- Affected individuals
- 16,584
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 48 weeks(338 days from discovery to filing)
- Compliance flags
- ME AG >90d · 338d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 17, 2022→ Filed with AG: Jul 21, 2023338d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.