HackingDelayed DiscoveryCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSIDENTITY_GOVERNMENTHigh
Endocrine and Psychiatry Center
bd_6e5b7ffaa90a42c5 · schema v1 · pii pii-v1
Full breach record for Endocrine and Psychiatry Center →Endocrine and Psychiatry Center reported an external system breach (hacking) that was discovered on October 15, 2023, having occurred sometime prior to March 20, 2023. The breach affected 28,531 individuals, compromising names and financial account or card numbers with their security codes. The organization began notifying affected individuals on November 14, 2023, and offered 12 months of complimentary credit monitoring services through Equifax for those whose Social Security numbers were impacted.
Maine clockDiscovered Oct 15, 2023 → Filed with AG Nov 14, 202330d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4dcea53cc726470bMontana State AGfiled 2023-11-14Verified
- bd_c2e6bb1a7042ece7HHS OCRfiled 2023-11-14Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d68fcc57-f7a4-4e71-a320-68f2e4c9aa37.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 14, 2023
- Raw hash
- 3c39ce4c8606ac5b81b2930b5fe055b6cede91ede5e861449af7742f35e95302
Reporting entity
- Name
- Endocrine and Psychiatry Centernorm: endocrine and psychiatry center
Victim entity
- Name
- Endocrine and Psychiatry Centernorm: endocrine and psychiatry center
Incident
- Discovered
- Oct 15, 2023
- Materiality determined
- —
- Notification sent
- Nov 14, 2023
- Affected individuals
- 28,531
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 15, 2023→ Filed with AG: Nov 14, 202330d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.