HackingHealthcareHealthcareCustomer Data InvolvedFinancial accountFinancial credentialsIdentity (basic)MediumContained

Port Resources

bd_601a403e66651845 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 31, 2021

Filed

Feb 28, 2022

To disclose

17 weeks

Affected · nationwide

1,164621 in this filing

Linked

2 filings

Confidence

50%

Full breach record for Port Resources →

Port Resources, a healthcare organization, reported a data breach affecting 621 Maine residents. The breach, which was discovered on October 31, 2021, and occurred on August 11, 2021, was the result of an external system breach (hacking). The compromised information included names in combination with financial account numbers or credit/debit card numbers. In response, Port Resources offered affected individuals 12 months of complimentary credit monitoring through Experian’s IdentityWorks.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 31, 2021 → Filed with AG Feb 28, 2022120d ✗ ME AG >90d17 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 81 days

discovery → filing · 17 weeks / 120 days

Aug 11, 2021

Begins

Oct 31, 2021

Discovered

Feb 28, 2022

Filed

vs. sector median

+5 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_38b5e0cd174e6ae02022-02-28Verified

Name: Port Resources
norm: port resources

Name: Port Resources
norm: port resources
Industry: Healthcarellm

Discovered: Oct 31, 2021
Breach occurred: Aug 11, 2021
Undetected for: 81 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 30, 2021
Affected individuals: 1,164state + nationwide
Data types: Financial accountFinancial credentialsIdentity (basic)
Data elements: Financial account number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Complimentary 12 month credit monitoring through Experian’s IdentityWorks.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(120 days from discovery to filing)
Compliance flags: ME AG >90d · 120d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 31, 2021
→ Filed with AG: Feb 28, 2022
120d 90 days ME AG >90d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 31, 2021 → Filed with AG: Feb 28, 2022	120d	90 days	ME AG >90d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGFeb 28 · first

Maine State AGFeb 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/38fb7478-603f-487b-be1f-435441151adb.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 28, 2022
Raw hash: bbc711347246b7cf4acfe0d45464048c4438ba84e6eb03822ae82a14e8b29168

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPort Resources

Victim entityPort Resources

Incidentdiscovered Oct 31, 2021

Stated responseComplimentary 12 month credit monitoring through Experian’s IdentityWorks.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov