HackingHealthcareProfessional ServicesHealthcareCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
SysInformation Healthcare Services, Inc.
bd_4e3382893d03266f · schema v1 · pii pii-v1
Full breach record for SysInformation Healthcare Services, Inc. →SysInformation Healthcare Services, Inc. (d/b/a EqualizeRCM), a revenue cycle and billing services firm, experienced an external network breach between June 3–18, 2023, resulting in unauthorized access to and potential acquisition of files containing personal information. The breach was discovered on September 13, 2024, and notifications were sent October 4, 2024. Two Maine residents were affected. The company offered 12 months of IDX identity theft protection services.
Maine clockDiscovered Sep 13, 2024 → Filed with AG Oct 29, 202446d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0b78b46cfff5cc8dVermont State AGfiled 2024-10-29Verified
- bd_0fdbad83d099a492California State AGfiled 2024-10-29Verified
- bd_502dadec6642b714New Hampshire State AGfiled 2024-10-29Verified
- bd_b6be72836a476f89Maine State AGfiled 2024-10-10(19d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ca8b9868-38e2-48ed-8402-43c20aecf83c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 29, 2024
- Raw hash
- 6e99a978833c40e50620673e6dc3c6ce8767061ae3371a810fd8903ba37b0941
Reporting entity
- Name
- SysInformation Healthcare Services, Inc.norm: sysinformation healthcare
- Domain
- sysinformation.com
- Industry
- Professional Services - Revenue Cycle / Billing
Victim entity
- Name
- SysInformation Healthcare Services, Inc.norm: sysinformation healthcare
- Domain
- sysinformation.com
- Industry
- Professional Services - Revenue Cycle / Billing
- Industry
- HealthcarellmProfessional Servicesllm
Incident
- Discovered
- Sep 13, 2024
- Materiality determined
- —
- Notification sent
- Oct 4, 2024
- Affected individuals
- 2
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported to law enforcement and regulators, as required by law.
Compliance
- Time to disclose
- 7 weeks(46 days from discovery to filing)
- Compliance flags
- ME AG >30d · 46d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 13, 2024→ Filed with AG: Oct 29, 202446d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.