HackingHealthcareHealthcareCustomer Data InvolvedGovernment IDHighResolved

Benson Health

bd_5acd256e2f32b112 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 7, 2022

Filed

Jul 12, 2022

To disclose

5 weeks

Affected · nationwide

28,9133 in this filing

Linked

4 filings

Confidence

50%

Full breach record for Benson Health →

Benson Health, a healthcare organization, reported a data breach discovered on June 7, 2022, which originally occurred on May 5, 2021. The breach was an external system hacking incident that compromised the names and Social Security numbers of 28,913 individuals, including 3 residents of Maine. The company notified the affected individuals on July 12, 2022, and offered credit monitoring, fraud consultation, and identity theft protection services through Sontiq/Cyberscout.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 7, 2022 → Filed with AG Jul 12, 202235d ⏱ ME AG >30d5 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 398 days

discovery → filing · 5 weeks / 35 days

May 5, 2021

Begins

Jun 7, 2022

Discovered

Jul 12, 2022

Filed

vs. sector median

7 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_0704d68eb6e412b62022-07-12Verified
Massachusetts State AGbd_1d83314bf39c95092022-07-12Verified
HHS OCRbd_a46260088e2ddc352022-07-15 · +3dVerified

Name: Benson Health
norm: benson health
Domain: bensonhealth.org

Name: Benson Health
norm: benson health
Domain: bensonhealth.org
Industry: Healthcarellm

Discovered: Jun 7, 2022
Breach occurred: May 5, 2021
Undetected for: 398 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 12, 2022
Affected individuals: 28,913state + nationwide
Data types: Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Offered credit monitoring, fraud consultation and identify theft protection services through Sontiq/Cyberscout.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: ME AG >30d · 35d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 7, 2022
→ Filed with AG: Jul 12, 2022
35d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 7, 2022 → Filed with AG: Jul 12, 2022	35d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGJul 12 · first

Massachusetts State AGJul 12 · first

Maine State AGJul 12 · first · this page

HHS OCR+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/418159ce-846a-4b75-bbfe-336994fab11c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 12, 2022
Raw hash: ee4d837db5c6c33f39a35341b9df04a107dd02b41d442cdfef682bde0ad06cf2

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityBenson Health

Victim entityBenson Health

Incidentdiscovered Jun 7, 2022

Stated responseOffered credit monitoring, fraud consultation and identify theft protection services through Sontiq/Cyberscout.

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov