MisuseCustomer Data InvolvedLow
CVS HEALTH CORPORATION
bd_5dcb48c30a72e620 · schema v1 · pii pii-v1
Full breach record for CVS HEALTH CORPORATION →8 incidents on fileCVS reported an internal system breach that occurred on January 1, 2023, and was discovered on January 5, 2023. The breach affected 10 Maine residents. Affected individuals were notified electronically on January 10, 2023, and offered identity theft protection services.
J jump to incidentP pin to compareR raw source
Maine clockDiscovered Jan 5, 2023 → Filed with AG Apr 8, 2024459d ⏱ ME AG >30d15 months discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Incident timeline
undetected · 4 days
discovery → filing · 15 months / 459 days
Jan 1, 2023
Begins
Jan 5, 2023
Discovered
Apr 8, 2024
Filed
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10 affectedView incident
Evidence ladder
Leak-site claim
Attacker assertion only. Establishes: claim date, group, alleged victim.
Press / market report
Unlocks: incident narrative, operational impact. Still no compliance clock.
State AG / regulator filingThis record
Unlocks: discovery date, data types, affected count, compliance clock.
SEC 8-K / victim statement
Unlocks: materiality, stated response, full audit trail. Ceiling removed.