HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Quantum Imaging and Therapeutics Associates, Inc.
bd_7086219afa02b2fb · schema v1 · pii pii-v1
Full breach record for Quantum Imaging and Therapeutics Associates, Inc. →Quantum Imaging and Therapeutics Associates, Inc. reported an external system breach (hacking) on October 7, 2021, affecting 741 individuals. The incident involved the acquisition of names and Social Security Numbers. The entity notified affected individuals in writing on December 6, 2021, and provided 12 months of credit monitoring and identity recovery services through IDX. One Maine resident was affected.
Maine clockDiscovered Oct 7, 2021 → Filed with AG Dec 7, 202161d ⏱ ME AG >30d9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_0cea39b9289094c3HHS OCRfiled 2021-11-24(13d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/043d9ad0-d1b5-46b9-ab6d-22721bb44d07.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 7, 2021
- Raw hash
- a1c2b20d13417b524e2658b7b743afdad1c38e03f63f5a324bdb5d67ccd20d26
Reporting entity
- Name
- Quantum Imaging and Therapeutics Associates, Inc.norm: quantum imaging and therapeutics associates
Victim entity
- Name
- Quantum Imaging and Therapeutics Associates, Inc.norm: quantum imaging and therapeutics associates
Incident
- Discovered
- Oct 7, 2021
- Materiality determined
- —
- Notification sent
- Dec 6, 2021
- Affected individuals
- 741
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- ME AG >30d · 61d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 7, 2021→ Filed with AG: Dec 7, 202161d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.