HackingHealthcareProfessional ServicesHealthcareData ExfiltratedEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Health Dimensions Group
bd_67041c3e714169ff · schema v1 · pii pii-v1
Full breach record for Health Dimensions Group →Health Dimensions Group (Minneapolis, MN), a healthcare consulting firm, suffered an external system breach. Discovered Oct 20, 2025; unauthorized file access confirmed Nov 6, 2025. Review completed Feb 4, 2026 found independent contractors' names, addresses, and SSNs potentially exposed. 450 total affected; 1 Maine resident notified Mar 11, 2026. Credit monitoring via Cyberscout offered.
Maine clockDiscovered Nov 6, 2025 → Filed with AG Mar 11, 2026125d ✗ ME AG >90d18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by worldleaks about this victim predates this filing by 124 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_9802e4f50cf79f2cLeak Siteworldleaksfiled 2025-11-06(124d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_36151da45d5418b5Indiana State AGfiled 2026-03-11Verified by operator
- bd_7b6212bac1412f8eIndiana State AGfiled 2026-03-11Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9ed92f50-ce86-41e8-9de4-56304679945b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 11, 2026
- Raw hash
- b0871fc26ea6bcacd4a85063e586f1887d89522c6321770f60622fd47ea98066
Reporting entity
- Name
- Health Dimensions Groupnorm: health dimensions
- Domain
- healthdimensionsgroup.com
- Industry
- Healthcare consulting and management
Victim entity
- Name
- Health Dimensions Groupnorm: health dimensions
- Domain
- healthdimensionsgroup.com
- Industry
- Healthcare consulting and management
- Industry
- HealthcarellmProfessional Servicesllm
Incident
- Discovered
- Nov 6, 2025
- Materiality determined
- Feb 4, 2026
- Notification sent
- Mar 11, 2026
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notification filed with Maine Attorney General
Compliance
- Time to disclose
- 18 weeks(125 days from discovery to filing)
- Compliance flags
- ME AG >90d · 125dME resident >60d · 125dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 6, 2025→ Filed with AG: Mar 11, 2026125d 90 days ME AG >90d Maine Discovered: Nov 6, 2025→ Notified: Mar 11, 2026125d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.