HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMedium
Bridgeway
bd_5fd4f757e279a97e · schema v1 · pii pii-v1
Full breach record for Bridgeway →Bridgeway Center, Inc., a healthcare provider, experienced a data breach impacting 65,386 individuals. The incident, which occurred and was discovered on February 21, 2024, was described as an external system breach or hacking. The compromised information included names and financial account details, such as credit/debit card numbers along with their security codes or PINs. Affected individuals were notified on May 8, 2024, and offered 12 months of identity monitoring services.
Maine clockDiscovered Feb 21, 2024 → Filed with AG May 24, 202493d ✗ ME AG >90d13 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_34d7477903c41a27Indiana State AGfiled 2024-05-08(16d gap)Verified
- bd_3f67a0a2eb86637fMontana State AGfiled 2024-05-08(16d gap)Candidate
- bd_1d6867425294d491HHS OCRfiled 2024-04-19(35d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cf4c9ebf-093d-4a7f-af1e-c593b761eafd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 24, 2024
- Raw hash
- 3266c1f2f5dcebf6529d72abd44cc9d3f76dc8a6e93d3202deffe4b393fc7c87
Reporting entity
- Name
- Bridgewaynorm: bridgeway
- Domain
- bridgewayconnects.com
Victim entity
- Name
- Bridgewaynorm: bridgeway
- Domain
- bridgewayconnects.com
Incident
- Discovered
- Feb 21, 2024
- Materiality determined
- —
- Notification sent
- May 8, 2024
- Affected individuals
- 65,386
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 13 weeks(93 days from discovery to filing)
- Compliance flags
- ME AG >90d · 93dME resident >60d · 77d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 21, 2024→ Filed with AG: May 24, 202493d 90 days ME AG >90d Maine Discovered: Feb 21, 2024→ Notified: May 8, 202477d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.