HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDPHIHealth (basic)HighContained

Community Care Alliance

bd_473893005e2e34c1 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 6, 2024

Filed

Mar 10, 2025

To disclose

35 weeks

Affected

95,052state residents only

Linked

12 filings

Confidence

66%

Full breach record for Community Care Alliance →

Community Care Alliance, a Rhode Island healthcare provider, notified the RI Attorney General of a data breach affecting approximately 94,210 Rhode Island residents. Unauthorized access occurred between July 1-5, 2024, following a network disruption detected on July 6, 2024. The incident exposed PHI, SSNs, driver's license numbers, and other PII. Notices were mailed starting March 7, 2025, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Rhode Island clock✗ RI AG >45d35 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 5 days

discovery → filing · 35 weeks / 247 days

Jul 1, 2024

Begins

Jul 6, 2024

Discovered

Mar 10, 2025

Filed

vs. sector median

+23 wks slower

This filing is one of 12 about the same incident.View merged incident

A leak claim by rhysida about this victim predates this filing by 247 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siterhysidabd_95172056dcf4342a2024-07-26 · +226dVerified
Leak Siterhysidabd_656d112c466333962024-07-06 · +247dVerified by operator

Regulatory filings (8) · sorted by filing gap

Massachusetts State AGbd_b15ef12290999cea2025-03-08 · +2dVerified by operator
Maryland State AGbd_11480fae58d4f1622025-03-07 · +3dVerified by operator
Maine State AGbd_5fc914b4b0fa00fb2025-03-07 · +3dVerified
Vermont State AGbd_7ab8069417339df32025-03-07 · +3dVerified by operator

Show 4 more filings ↓up to 9d gap

Indiana State AGbd_7df035502e606dad2025-03-07 · +3dVerified by operator
Montana State AGbd_eddde174f903fd062025-03-07 · +3dVerified by operator
HHS OCRbd_6a779c94181037392025-03-01 · +9dVerified
HHS OCRbd_f2e045bf08be0a602025-03-01 · +9dVerified

Showing first 10 of 11 linked disclosures.

Name: Cipriani & Werner
norm: cipriani werner
Domain: c-wlaw.com

Name: Community Care Alliance
norm: community care alliance
Domain: communitycareri.org
Industry: Healthcarellm

Discovered: Jul 6, 2024
Breach occurred: Jul 1, 2024 – Jul 5, 2024
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 7, 2025
Affected individuals: 95,052state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified Rhode Island Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Engaged third-party forensic specialists to assist in a thorough investigation
Notified law enforcement
Implemented additional technical measures
Secured their environment
Provided direct notice to the potentially impacted individuals via U.S. mail
Changes made: Offered complimentary credit monitoring and identity protection services for twelve (12) months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(247 days from discovery to filing)
Compliance flags: RI AG >45dLeak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

HHS OCRMar 1 · first

Massachusetts State AG+7d

Rhode Island State AG+9d · this page

Pattern: first filing Mar 1 (RI), last Mar 10 (RI) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://riag.ri.gov/media/7416/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 10, 2025
Raw hash: 3562756e3925337c3c65dadcb873f35cc3fb8cf92841a52ade7f9e38c7e7f675

Linked disclosures

Ransomware claims (2)

Regulatory filings (8) · sorted by filing gap

Reporting entityCipriani & Werner

Victim entityCommunity Care Alliance

Incidentdiscovered Jul 6, 2024

Stated responseEngaged third-party forensic specialists to assist in a thorough investigation

ComplianceRI AG >45d

Extraction provenanceno artifact recorded

Source provenanceriag.ri.gov