HackingCustomer Data InvolvedLowContained
NorthBay Healthcare Corporation
bd_48556d100c6d2adc · schema v1 · pii pii-v1
Full breach record for NorthBay Healthcare Corporation →NorthBay Healthcare Corporation reported a data breach impacting 16 Maine residents. The incident, described as an external system breach (hacking), occurred from January 11, 2024, to April 1, 2024, and was discovered on September 11, 2024. NorthBay offered one year of identity theft protection services through Experian to those affected.
Maine clockDiscovered Sep 11, 2024 → Filed with AG Jan 29, 2025140d ✗ ME AG >90d20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_3e24cc6d7f940850Oregon State AGfiled 2025-01-29Candidate
- bd_84b37cb0f778512bCalifornia State AGfiled 2025-01-29Verified by operator
- bd_9e74ae9ee1e29801Vermont State AGfiled 2025-01-29Verified
- bd_e0f4c14e6c397f7bMontana State AGfiled 2025-01-29Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/88fc9df0-3e37-449b-81ca-4f5dfebb7385.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 29, 2025
- Raw hash
- 442e02740c77c3106477bb0a9a1cc4d51099b263aaa04e55f8b8372dd6c4dbc4
Reporting entity
- Name
- NorthBay Healthcare Corporationnorm: northbay healthcare
Victim entity
- Name
- NorthBay Healthcare Corporationnorm: northbay healthcare
Incident
- Discovered
- Sep 11, 2024
- Materiality determined
- —
- Notification sent
- Jan 29, 2025
- Affected individuals
- 16
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 20 weeks(140 days from discovery to filing)
- Compliance flags
- ME AG >90d · 140dME resident >60d · 140d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 11, 2024→ Filed with AG: Jan 29, 2025140d 90 days ME AG >90d Maine Discovered: Sep 11, 2024→ Notified: Jan 29, 2025140d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.