HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
The Johns Hopkins Health System Corporation Master Trust
bd_605496983a216d90 · schema v1 · pii pii-v1
Full breach record for The Johns Hopkins Health System Corporation Master Trust →The Johns Hopkins University and affiliated health systems experienced an external system breach (hacking) on May 29, 2023, discovered on May 31, 2023. The incident compromised names and Social Security Numbers of 363,885 individuals, including 43 Maine residents. Notification was sent on June 23, 2023, offering two years of credit monitoring.
Maine clockDiscovered May 31, 2023 → Filed with AG Jul 25, 202355d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed363,885 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3081802f-d35d-4bed-ab09-87f05c277499.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 25, 2023
- Raw hash
- 6b5d52d548fac494d24ff30787536ebe923eb7547d0aa5d4f70477997ad07faa
Reporting entity
- Name
- The Johns Hopkins Health System Corporation Master Trustnorm: the johns hopkins health system corporation master
Victim entity
- Name
- The Johns Hopkins Health System Corporation Master Trustnorm: the johns hopkins health system corporation master
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- Jun 23, 2023
- Affected individuals
- 363,885
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- ME AG >30d · 55d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 31, 2023→ Filed with AG: Jul 25, 202355d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.