HackingData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Direct Radiology, PLLC
bd_678fc42b332ae01c · schema v1 · pii pii-v1
Full breach record for Direct Radiology, PLLC →Direct Radiology, PLLC, a healthcare entity, experienced an external system breach (hacking) on November 28, 2023. The incident affected 147 individuals, including one Maine resident. The breach involved the acquisition of names and driver's license numbers. The breach was discovered on the same date it occurred. Notification was sent on December 21, 2023, offering 24 months of Experian IdentityWorks. The breach was attributed to a third-party managed services provider, Philips North America LLC.
Maine clockDiscovered Nov 28, 2023 → Filed with AG Dec 27, 202329d ✓ ME AG ≤30d29 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed147 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/26b19ccb-c5ca-44a0-ae8c-d772915cb6b1.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 27, 2023
- Raw hash
- 5b6345edddf61908d83ab9c7d9c2ebd32bb65cf07bf3ff5bc602d9c9aad14f11
Reporting entity
- Name
- PHILIPS DS NORTH AMERICA LLCnorm: philips ds north america
Victim entity
- Name
- Direct Radiology, PLLCnorm: direct radiology
Incident
- Discovered
- Nov 28, 2023
- Materiality determined
- —
- Notification sent
- Dec 21, 2023
- Affected individuals
- 147
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Third party
- via Philips North America LLCManaged Services Provider
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 28, 2023→ Filed with AG: Dec 27, 202329d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.