HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
NEC Networks, LLC
bd_6a1ad49e89b3b6fb · schema v1 · pii pii-v1
Full breach record for NEC Networks, LLC →NEC Networks, LLC d/b/a CaptureRx reported an external system breach (hacking) occurring on February 6, 2021, discovered on March 30, 2021. The incident affected 2,154,280 individuals nationwide, including 1,476 Maine residents. Consumer reporting agencies were notified. Written notification was sent on June 7, 2021. No identity theft protection services were offered.
Maine clockDiscovered Mar 30, 2021 → Filed with AG Jun 7, 202169d ⏱ ME AG >30d10 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_57d49d1763246b4aCalifornia State AGfiled 2021-06-11(4d gap)Verified
- bd_cb9d5481cc621589Maine State AGfiled 2021-06-25(18d gap)Verified
- bd_7178058c30ce9296Maine State AGfiled 2021-05-18(20d gap)Verified
- bd_0cdd0359a688883bHHS OCRfiled 2021-05-05(33d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 35d gap
- bd_420e0ba7035c47eaOregon State AGfiled 2021-05-05(33d gap)Verified
- bd_d7a6f1b2b5aa73d9Washington State AGfiled 2021-05-05(33d gap)Verified
- bd_b509a914071586c4Maine State AGfiled 2021-07-12(35d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c7fb9274-b062-4b3e-abbc-3748faf02180.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 7, 2021
- Raw hash
- 2f5c67a263b5cb0bac1d344994101a17f9e51be45749d25040092a55c7d2d7a3
Reporting entity
- Name
- NEC Networks, LLCnorm: nec networks
- Industry
- Healthcare
Victim entity
- Name
- NEC Networks, LLCnorm: nec networks
- Industry
- Healthcare
Incident
- Discovered
- Mar 30, 2021
- Materiality determined
- —
- Notification sent
- Jun 7, 2021
- Affected individuals
- 2,154,280
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified consumer reporting agencies
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- ME AG >30d · 69dME resident >60d · 69d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 30, 2021→ Filed with AG: Jun 7, 202169d 30 days (soft) ME AG >30d Maine Discovered: Mar 30, 2021→ Notified: Jun 7, 202169d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.