HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Summit Eye Associates
bd_7258ba2fe9670782 · schema v1 · pii pii-v1
Full breach record for Summit Eye Associates →Summit Eye Associates, P.C., a healthcare provider based in Hermitage, TN, reported an external system breach (hacking) occurring on December 4, 2021, discovered on March 1, 2022. The incident affected 53,818 individuals, including 3 Maine residents. Acquired data included names and Social Security Numbers. The entity provided written notification and offered one year of credit monitoring and identity theft protection services through IDX.
Maine clockDiscovered Mar 1, 2022 → Filed with AG Apr 27, 202257d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_1658afa246fd6865Montana State AGfiled 2022-04-27Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/adae27e8-c26a-478a-948e-fe1354b83709.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 27, 2022
- Raw hash
- 4543839abee2b379f7829ba6b6635672c13d58e15000ba49ab7a419a863a0612
Reporting entity
- Name
- Summit Eye Associatesnorm: summit eye associates
- Industry
- Healthcare
Victim entity
- Name
- Summit Eye Associatesnorm: summit eye associates
- Industry
- Healthcare
Incident
- Discovered
- Mar 1, 2022
- Materiality determined
- —
- Notification sent
- Apr 27, 2022
- Affected individuals
- 53,818
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- ME AG >30d · 57d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 1, 2022→ Filed with AG: Apr 27, 202257d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.