DisclosureLens
MultipleHealthcareRansomwareBECData EncryptedCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDCriticalResolved

PracticeMax

bd_5ae3246e5df7f9fd · schema v1 · pii pii-v1

Severity

Critical

Discovered

Feb 2, 2022

Filed

Mar 4, 2022

To disclose

4 weeks

Affected · nationwide

165,6985 in this filing

Linked

5 filings

Confidence

65%
Full breach record for PracticeMax →5 incidents on file

PracticeMax, a business services provider, reported a data breach involving ransomware and a business email compromise. The incident occurred between April 17, 2021, and May 5, 2021. The breach compromised the names and Social Security numbers of 165,698 individuals. The company notified the affected individuals on March 4, 2022.

Maine clockDiscovered Feb 2, 2022 → Filed with AG Mar 4, 202230d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 291 days
discovery → filing · 4 weeks / 30 days

Apr 17, 2021

Begins

Feb 2, 2022

Discovered

Mar 4, 2022

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Montana State AGMar 4 · first
Massachusetts State AGMar 4 · first
Indiana State AGMar 4 · first
Maine State AGMar 4 · first · this page
New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.