HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIALMediumContained
Community Care Alliance
bd_5fc914b4b0fa00fb · schema v1 · pii pii-v1
Full breach record for Community Care Alliance →Community Care Alliance (RI-based healthcare org) experienced a network disruption July 6, 2024. Unauthorized access occurred July 1-5, 2024. Data at risk: names, addresses, DOB, driver's license, SSN, diagnosis, lab results, medications, patient IDs, health insurance info. Investigation completed Jan 8, 2025. 50 Maine residents and 114,945 total individuals affected. Notifications sent March 2025.
Leak gap clock✗ Leak >180d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by rhysida about this victim predates this filing by 244 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_656d112c46633396Leak Siterhysidafiled 2024-07-06(244d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_7ab8069417339df3Vermont State AGfiled 2025-03-07Verified by operator
- bd_eddde174f903fd06Montana State AGfiled 2025-03-07Verified by operator
- bd_f2e045bf08be0a60HHS OCRfiled 2025-03-01(6d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d05bb570-97ef-41a3-a12e-c2e994d71f76.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 7, 2025
- Raw hash
- dc7d5500b1615b70a6b258fe4993c16b625b327cddd7176712e8115f8e0ab544
Reporting entity
- Name
- Community Care Alliancenorm: community care alliance
- Domain
- communitycareri.org
- Industry
- Healthcare
Victim entity
- Name
- Community Care Alliancenorm: community care alliance
- Domain
- communitycareri.org
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jan 8, 2025
- Materiality determined
- Jan 8, 2025
- Notification sent
- Mar 7, 2025
- Affected individuals
- 50
- Data types
- PIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 58d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 8, 2025→ Filed with AG: Mar 7, 202558d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.