DisclosureLens
HackingHealthcareHealthcareDelayed DiscoveryCustomer Data InvolvedIdentity (basic)Government IDHigh

Suncoast Skin Solutions

bd_64a5d0d58d3bf550 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 14, 2021

Filed

Dec 6, 2022

To disclose

17 months

Affected · nationwide

75,99221 in this filing

Linked

3 filings

Confidence

65%
Full breach record for Suncoast Skin Solutions →2 incidents on file

Suncoast Skin Solutions reported a data breach to the Maine Attorney General, affecting 75,992 individuals, 21 of whom are Maine residents. The breach occurred and was discovered on July 14, 2021. The incident was described as an external system breach (hacking), where names and Social Security numbers were acquired. Affected individuals were notified on December 6, 2022, and offered credit monitoring and identity theft restoration services.

Maine clockDiscovered Jul 14, 2021 → Filed with AG Dec 6, 2022510d ✗ ME AG >90d17 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 17 months / 510 days

Jul 14, 2021

Begins

Jul 14, 2021

Discovered

Dec 6, 2022

Filed

vs. sector median

+62 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Indiana State AGDec 6 · first
Maine State AGDec 6 · first · this page
New Hampshire State AG+7d

Pattern: first filing Dec 6 (IN), last Dec 13 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.