HackingHealthcareTechnologyHealthcareCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMinorHighContained

siParadigm LLC

bd_67c8c9c6e3d1576a · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 11, 2024

Filed

Sep 19, 2024

To disclose

14 weeks

Affected · nationwide

26,5343 in this filing

Linked

9 filings

Confidence

65%

Full breach record for siParadigm LLC →2 incidents on file

siParadigm LLC, a healthcare technology provider, reported an external system breach (hacking) on June 11, 2024. The incident affected 26,534 individuals nationwide, including 3 Maine residents. Compromised data included names, government identifiers (SSN), and minor identity information. siParadigm notified affected individuals on September 18, 2024, and offered 12 months of complimentary credit monitoring and identity protection services through CyberScout/TransUnion.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 11, 2024 → Filed with AG Sep 19, 2024100d ✗ ME AG >90d14 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 14 weeks / 100 days

Jun 11, 2024

Begins

Jun 11, 2024

Discovered

Sep 19, 2024

Filed

vs. sector median

+3 wks slower

This filing is one of 9 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 57 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_f386f8a45f4b5b972024-07-23 · +57dVerified by operator

Regulatory filings (7) · sorted by filing gap

Montana State AGbd_138e02033976bdd22024-09-19Verified by operator
California State AGbd_84f86b3d08b3fef82024-09-19Verified
New Hampshire State AGbd_a8d0d8c49244dbd72024-09-19Verified by operator
Massachusetts State AGbd_5de13dead78b8c782024-09-20 · +1dVerified by operator

Show 3 more filings ↓up to 41d gap

Vermont State AGbd_3c07eba5a794139c2024-09-18 · +1dVerified by operator
Indiana State AGbd_e363649eebe1e9182024-09-18 · +1dVerified by operator
HHS OCRbd_516065a53e6f912c2024-08-09 · +41dVerified

Name: siParadigm LLC
norm: siparadigm

Name: siParadigm LLC
norm: siparadigm
Industry: HealthcarellmTechnologyllm

Discovered: Jun 11, 2024
Breach occurred: Jun 11, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 18, 2024
Affected individuals: 26,534state + nationwide
Data types: Identity (basic)Government IDMinor
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Arranged for complimentary credit monitoring and related services for twelve months
Provided identity protection services and identity theft insurance through CyberScout, a TransUnion company
Sent written notification to affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(100 days from discovery to filing)
Compliance flags: ME AG >90d · 100dME resident >60d · 99dLeak >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 11, 2024
→ Filed with AG: Sep 19, 2024
100d 90 days ME AG >90d
Maine
Discovered: Jun 11, 2024
→ Notified: Sep 18, 2024
99d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 11, 2024 → Filed with AG: Sep 19, 2024	100d	90 days	ME AG >90d
Maine	Discovered: Jun 11, 2024 → Notified: Sep 18, 2024	99d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

HHS OCRAug 9 · first

Vermont State AG+40d

Indiana State AG+40d

Montana State AG+41d

California State AG+41d

New Hampshire State AG+41d

Maine State AG+41d · this page

Massachusetts State AG+42d

Pattern: first filing Aug 9 (NJ), last Sep 20 (MA) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1c4820a0-5407-40af-b23f-756c05f4f01a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2024
Raw hash: 3ec1a2513545c2319b03b53bd4e34e774412fb25f7e7d34d711150f736b2bdeb

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entitysiParadigm LLC

Victim entitysiParadigm LLC

Incidentdiscovered Jun 11, 2024

Stated responseArranged for complimentary credit monitoring and related services for twelve months

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov