HackingCustomer Data InvolvedPIILowContained
Next Step Healthcare
bd_5c2bfa33adf0bf11 · schema v1 · pii pii-v1
Full breach record for Next Step Healthcare →Next Step Healthcare LLC reported an external system breach that occurred from May 21, 2024, to June 5, 2024. The breach was discovered on May 22, 2025. The incident affected 192 Maine residents, who were notified on May 29, 2025. The company offered 12 months of identity theft protection services through IDX.
Leak gap clock✗ Leak >180d8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 359 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_7dac25fd5bde3f8cLeak Siteqilinfiled 2024-07-17(317d gap)Verified by operator
- bd_58ee69bf27d12283Leak Siteqilinfiled 2024-06-05(359d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_92d553698d40bfd9HHS OCRfiled 2025-05-30Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bcc8bbb9-cf64-4b49-b36f-d87a687f1412.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 30, 2025
- Raw hash
- 71f24bf097f6afa7908dc2d255f7ee59bc0d2f9d301c5da1f91aa1e916098ee6
Reporting entity
- Name
- Next Step Healthcarenorm: next step healthcare
- Domain
- nextstephc.com
Victim entity
- Name
- Next Step Healthcarenorm: next step healthcare
- Domain
- nextstephc.com
Incident
- Discovered
- May 22, 2025
- Materiality determined
- —
- Notification sent
- May 29, 2025
- Affected individuals
- 192
- Data types
- PII
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 8d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 22, 2025→ Filed with AG: May 30, 20258d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.