HackingCustomer Data InvolvedLow
CCM Health
bd_6b20c17d34a911a3 · schema v1 · pii pii-v1
Full breach record for CCM Health →CCM Health, a healthcare organization, reported a data breach to the Maine Attorney General. The breach, which occurred between April 3, 2023, and April 10, 2023, was discovered on February 12, 2024. The incident was described as an external system breach (hacking) and affected 5 Maine residents. In response, CCM Health offered 12 months of credit monitoring and identity restoration services through Cyberscout via TransUnion.
Maine clockDiscovered Feb 12, 2024 → Filed with AG Jul 18, 2024157d ✗ ME AG >90d22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b48921ca-7e05-43db-89fe-e87e80039f55.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 18, 2024
- Raw hash
- 18411cd71973022c5a8b0f7e69ae03e97c401d9807af7236808fa0d675544fa9
Reporting entity
- Name
- CCM Healthnorm: ccm health
- Domain
- ccmhealthmn.com
Victim entity
- Name
- CCM Healthnorm: ccm health
- Domain
- ccmhealthmn.com
Incident
- Discovered
- Feb 12, 2024
- Materiality determined
- —
- Notification sent
- Mar 12, 2024
- Affected individuals
- 5
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 22 weeks(157 days from discovery to filing)
- Compliance flags
- ME AG >90d · 157d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 12, 2024→ Filed with AG: Jul 18, 2024157d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.