HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
NorthCare
bd_4b94c8d48cdeabc5 · schema v1 · pii pii-v1
Full breach record for NorthCare →NorthCare, a healthcare entity based in Oklahoma City, reported an external system breach (hacking) occurring on June 1, 2021, discovered on August 6, 2021. The incident affected 127,884 individuals, including 1 Maine resident. Acquired data included names and Social Security Numbers. NorthCare sent initial notifications on August 6, 2021, and offered one year of identity theft protection and credit monitoring.
Maine clockDiscovered Aug 6, 2021 → Filed with AG Nov 16, 2021102d ✗ ME AG >90d15 weeks discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed127,884 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c87baee9-9c92-4540-8f7c-4446a7c8a58a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 16, 2021
- Raw hash
- c40cab1f38e16bb76863c692b5037f30f4cd3ab6c764ea7c047de704e7ed91c1
Reporting entity
- Name
- NorthCarenorm: northcare
- Domain
- northcare.com
Victim entity
- Name
- NorthCarenorm: northcare
- Domain
- northcare.com
Incident
- Discovered
- Aug 6, 2021
- Materiality determined
- —
- Notification sent
- Aug 6, 2021
- Affected individuals
- 127,884
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 weeks(102 days from discovery to filing)
- Compliance flags
- ME AG >90d · 102d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 6, 2021→ Filed with AG: Nov 16, 2021102d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.