HackingHealthcareHealthcareCustomer Data InvolvedPHILowContained
Nacogdoches Memorial Hospital
bd_532a9f2d9cbd8c1a · schema v1 · pii pii-v1
Full breach record for Nacogdoches Memorial Hospital →Nacogdoches Memorial Hospital (Nacogdoches, TX) reported an external system breach (hacking) occurring on January 15, 2026, discovered January 31, 2026. A total of 257,073 individuals were affected nationally; 5 Maine residents were affected. Consumer notification was sent March 31, 2026. The filing describes a HIPAA patient notice. No identity theft protection services were offered.
Maine clockDiscovered Jan 31, 2026 → Filed with AG Mar 31, 202659d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_10c07a29e1f5befdNew Hampshire State AGfiled 2026-03-31Verified
- bd_e894e0dd4e632bf3HHS OCRfiled 2026-03-30(1d gap)Verified
- bd_ba4426b59fd205cdIndiana State AGfiled 2026-03-12(19d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ebcabbec-590c-4fd3-b97c-555fd8ced542.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 31, 2026
- Raw hash
- 422edd014f1d32db68b5a89efa7dc0b15fa52aa21e59d2d2456e731a6610293c
Reporting entity
- Name
- Nacogdoches Memorial Hospitalnorm: nacogdoches memorial hospital
- Domain
- nacmem.org
- Industry
- Healthcare
Victim entity
- Name
- Nacogdoches Memorial Hospitalnorm: nacogdoches memorial hospital
- Domain
- nacmem.org
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jan 31, 2026
- Materiality determined
- —
- Notification sent
- Mar 31, 2026
- Affected individuals
- 5
- Data types
- PHI
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- ME AG >30d · 59d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 31, 2026→ Filed with AG: Mar 31, 202659d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.