HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Central Indiana Orthopedics
bd_550eb4f72b1e5e47 · schema v1 · pii pii-v1
Full breach record for Central Indiana Orthopedics →Central Indiana Orthopedics, a healthcare provider based in Muncie, Indiana, experienced an external system breach (hacking) between November 4, 2021, and December 10, 2021. The incident compromised the personal information of 83,705 individuals, including names and Social Security Numbers. The breach was discovered on November 4, 2021. The entity notified affected individuals in writing on March 7, 2022, and offered 12 months of identity theft protection and credit monitoring services through IDX. Six Maine residents were specifically affected.
Maine clockDiscovered Nov 4, 2021 → Filed with AG Mar 7, 2022123d ✗ ME AG >90d18 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_9d937bc08a111f47HHS OCRfiled 2022-03-07Verified
- bd_e8b63382f007b525Montana State AGfiled 2022-03-07Candidate
- bd_dfcca2999372f5fdNew Hampshire State AGGrieffiled 2022-03-14(7d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/03eb1fcd-6dec-4463-b924-fd9ac74369a7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 7, 2022
- Raw hash
- 821488050d0f6c127dc9e2b2ad89de5154ff7d3f61ff8e2be060009813f7dd69
Reporting entity
- Name
- Central Indiana Orthopedicsnorm: central indiana orthopedics
Victim entity
- Name
- Central Indiana Orthopedicsnorm: central indiana orthopedics
Incident
- Discovered
- Nov 4, 2021
- Materiality determined
- —
- Notification sent
- Mar 7, 2022
- Affected individuals
- 83,705
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 18 weeks(123 days from discovery to filing)
- Compliance flags
- ME AG >90d · 123dME resident >60d · 123d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 4, 2021→ Filed with AG: Mar 7, 2022123d 90 days ME AG >90d Maine Discovered: Nov 4, 2021→ Notified: Mar 7, 2022123d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.