HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumResolved

AllCare Plus Pharmacy, Inc.

bd_68b88f2af1a2f6e1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 21, 2022

Filed

Mar 14, 2023

To disclose

38 weeks

Affected · nationwide

5,97115 in this filing

Linked

6 filings

Confidence

75%

Full breach record for AllCare Plus Pharmacy, Inc. →

AllCare Plus Pharmacy, Inc. experienced an external system breach on April 14, 2022, discovered on June 21, 2022. The breach affected 15 Maine residents, compromising names and financial account information. The company notified affected individuals on March 13, 2023, and offered two years of credit monitoring services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 21, 2022 → Filed with AG Mar 14, 2023266d ✗ ME AG >90d38 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 68 days

discovery → filing · 38 weeks / 266 days

Apr 14, 2022

Begins

Jun 21, 2022

Discovered

Mar 14, 2023

Filed

vs. sector median

+25 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

California State AGbd_016eb0e9eb948a4e2023-03-14Verified
HHS OCRbd_64049b67a6737ea62023-03-15 · +1dVerified
New Hampshire State AGbd_ed00763a16da7aa22023-03-15 · +1dVerified
Indiana State AGbd_9f84fada0c7f39c22023-03-13 · +1dCandidate

Show 1 more filing ↓up to 2d gap

Massachusetts State AGbd_25d04aea2d9aadd82023-03-16 · +2dVerified

Name: AllCare Plus Pharmacy, Inc.
norm: allcare plus pharmacy

Name: AllCare Plus Pharmacy, Inc.
norm: allcare plus pharmacy
Industry: Healthcarellm

Discovered: Jun 21, 2022
Breach occurred: Apr 14, 2022
Undetected for: 68 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 13, 2023
Affected individuals: 5,971state + nationwide
Data types: Identity (basic)Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unauthorized Access

During the incident: Set up a call center for affected individuals.
Changes made: Offered two years of credit monitoring services through Experian IdentityWorks.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(266 days from discovery to filing)
Compliance flags: ME AG >90d · 266dME resident >180d · 265d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 21, 2022
→ Filed with AG: Mar 14, 2023
266d 90 days ME AG >90d
Maine
Discovered: Jun 21, 2022
→ Notified: Mar 13, 2023
265d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 21, 2022 → Filed with AG: Mar 14, 2023	266d	90 days	ME AG >90d
Maine	Discovered: Jun 21, 2022 → Notified: Mar 13, 2023	265d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGMar 13 · first

California State AG+1d

Maine State AG+1d · this page

HHS OCR+2d

New Hampshire State AG+2d

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/afad8db8-f984-4f0a-b933-5015ef9d7dea.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 14, 2023
Raw hash: 7936f188059ce118fed6a46754e2e409f229e53698751c3c3b31069879d0ae8b

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityAllCare Plus Pharmacy, Inc.

Victim entityAllCare Plus Pharmacy, Inc.

Incidentdiscovered Jun 21, 2022

Stated responseSet up a call center for affected individuals.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov