AccidentalDisposal ErrorCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCriticalResolved
HealthReach Community Health Centers
bd_4b97ea1bb4f0653f · schema v1 · pii pii-v1
Full breach record for HealthReach Community Health Centers →HealthReach Community Health Centers reported a data breach involving the improper disposal of electronic hardware containing patient information, including names, government IDs, and financial account numbers. The incident affected 116,898 individuals, including 101,395 Maine residents. The breach occurred on April 7, 2021, was discovered on May 7, 2021, and notifications were sent on September 9, 2021. Affected individuals were offered 12 months of credit and dark web monitoring.
Maine clockDiscovered May 7, 2021 → Filed with AG Sep 9, 2021125d ✗ ME AG >90d18 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed116,898 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aa904682-5a4f-45fb-bd4d-79095854623d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 9, 2021
- Raw hash
- 594614d5d5ee9dd8722276b13b3d556629dae442791cb8ae5a817ef871c8e041
Reporting entity
- Name
- HealthReach Community Health Centersnorm: healthreach community health centers
- Industry
- Healthcare
Victim entity
- Name
- HealthReach Community Health Centersnorm: healthreach community health centers
- Industry
- Healthcare
Incident
- Discovered
- May 7, 2021
- Materiality determined
- —
- Notification sent
- Sep 9, 2021
- Affected individuals
- 116,898
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- Regulator citations
- Filed data breach notice with Maine Attorney General
Compliance
- Time to disclose
- 18 weeks(125 days from discovery to filing)
- Compliance flags
- ME AG >90d · 125dME resident >60d · 125d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 7, 2021→ Filed with AG: Sep 9, 2021125d 90 days ME AG >90d Maine Discovered: May 7, 2021→ Notified: Sep 9, 2021125d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.