UnknownHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Hillcrest Convalescent Center, Inc.

bd_55a8a09648ffd05b · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 3, 2025

To disclose

—

Affected

574state residents only

Linked

11 filings

Confidence

62%

Full breach record for Hillcrest Convalescent Center, Inc. →

Hillcrest Convalescent Center notified the Maryland AG of a breach affecting 574 Maryland residents. Compromised data included names, DOBs, SSNs, and PHI. Notification began Feb 28, 2025, offering 12 months of credit monitoring. The source of the compromise was not explicitly detailed in the filing.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 3, 2025

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Montana State AGbd_8b96c2224b4c567a2025-03-03Verified
Iowa State AGbd_98eabc481683cfdc2025-03-03Verified
Indiana State AGbd_c8248abe92f311602025-03-03Verified
Oregon State AGbd_450c36cd9e72a60b2025-03-04 · +1dVerified

Show 6 more filings ↓up to 2d gap

New Hampshire State AGbd_46c7f364f889c4ed2025-03-04 · +1dVerified
Washington State AGbd_8323ca8f7ebddc142025-03-04 · +1dVerified
Maine State AGbd_9de93e16a266605e2025-03-04 · +1dVerified
California State AGbd_d9983a2b5a6a557c2025-03-04 · +1dVerified
HHS OCRbd_f2ba0b9c9e51c63f2025-03-04 · +1dVerified by operator
Massachusetts State AGbd_f4d64e410a8e28d32025-03-05 · +2dVerified by operator

Name: Hillcrest Convalescent Center, Inc.
norm: hillcrest convalescent center

Name: Hillcrest Convalescent Center, Inc.
norm: hillcrest convalescent center
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Feb 28, 2025
Affected individuals: 574state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unknown
MITRE ATT&CK: T1119 Automated Collection
Regulator citations: Filed notification with Maryland Attorney General

During the incident: Retained outside experts and investigated the matter to determine the source and scope of the potential compromise
Implemented additional security measures to further harden their defenses
Mailed notification letters to affected individuals
Offered 12 months of complimentary identity protection services through Cyberscout
Established a toll-free call center through Cyberscout
Changes made: Implemented additional security measures to further harden their defenses
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Montana State AGMar 3 · first

Iowa State AGMar 3 · first

Indiana State AGMar 3 · first

Maryland State AGMar 3 · first · this page

Oregon State AG+1d

New Hampshire State AG+1d

Washington State AG+1d

Maine State AG+1d

California State AG+1d

HHS OCR+1d

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376501.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 3, 2025
Raw hash: 2dfde751bc9769a7dd684ed22f541aa3378f0ae1584969862e3f850aace6c164

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityHillcrest Convalescent Center, Inc.

Victim entityHillcrest Convalescent Center, Inc.

IncidentUnknown

Stated responseRetained outside experts and investigated the matter to determine the source and scope of the potential compromise

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov