HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Columbus Regional Healthcare System, Inc.
bd_4e70fe80e3508930 · schema v1 · pii pii-v1
Full breach record for Columbus Regional Healthcare System, Inc. →Columbus Regional Healthcare System, a healthcare organization, experienced an external system breach (hacking) that occurred from May 19, 2023, to May 21, 2023. The breach was discovered on December 28, 2023. The incident affected 132,887 individuals in total, including one resident of Maine. The compromised information included names and Social Security Numbers. In response, the entity offered 12 months of identity theft protection services through Experian to those whose Social Security numbers were affected.
Leak gap clock✗ Leak >180d22 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by daixin about this victim predates this filing by 223 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_2fcfec8fdffc8f54Leak Sitedaixinfiled 2023-06-09(223d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_24d9b354b418af93Vermont State AGfiled 2024-01-19Verified
- bd_8852302e7d95aeedHHS OCRfiled 2024-01-19Verified
- bd_545284449387bb15New Hampshire State AGfiled 2024-01-24(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7eaf9a77-7c1f-4844-a9a5-15e43f7d89ee.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 19, 2024
- Raw hash
- 6204c8f4f959249aaa49897f821e4e019ca7f42aad5cb67a857b071fe18a7ad3
Reporting entity
- Name
- Columbus Regional Healthcare System, Inc.norm: columbus regional healthcare system
- Domain
- crhealthcare.org
Victim entity
- Name
- Columbus Regional Healthcare System, Inc.norm: columbus regional healthcare system
- Domain
- crhealthcare.org
Incident
- Discovered
- Dec 28, 2023
- Materiality determined
- —
- Notification sent
- Jan 19, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 22d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 28, 2023→ Filed with AG: Jan 19, 202422d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.