HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Northwest Eye Surgeons, P.C. and Sight Partners LLC (collectively, “NES”)
bd_58ed112d3eb564b1 · schema v1 · pii pii-v1
Full breach record for Northwest Eye Surgeons, P.C. and Sight Partners LLC (collectively, “NES”) →Northwest Eye Surgeons, P.C. and Sight Partners LLC (NES) reported an external system breach (hacking) occurring on May 1, 2020. The incident affected 6,498 individuals, including 1 Maine resident. The breach compromised names and Social Security Numbers. NES provided 12 months of credit, dark web monitoring, and ID theft restoration services through Experian to affected individuals.
Maine clockDiscovered May 1, 2020 → Filed with AG Sep 23, 2020145d ✗ ME AG >90d21 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6,498 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bce234e1-6807-44a1-9d10-5ad6d2deb6e6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 23, 2020
- Raw hash
- 4d7b34081bf383c3c9fec0724954fb255fce9734fd0977ec09961ebc1913c57a
Reporting entity
- Name
- Northwest Eye Surgeons, P.C. and Sight Partners LLC (collectively, “NES”)norm: northwest eye surgeons pc and sight partners llc collectively nes
Victim entity
- Name
- Northwest Eye Surgeons, P.C. and Sight Partners LLC (collectively, “NES”)norm: northwest eye surgeons pc and sight partners llc collectively nes
Incident
- Discovered
- May 1, 2020
- Materiality determined
- —
- Notification sent
- Oct 30, 2020
- Affected individuals
- 6,498
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 weeks(145 days from discovery to filing)
- Compliance flags
- ME AG >90d · 145dME resident >180d · 182d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 1, 2020→ Filed with AG: Sep 23, 2020145d 90 days ME AG >90d Maine Discovered: May 1, 2020→ Notified: Oct 30, 2020182d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.