HackingStolen CredentialsDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIHighContained
Community Care Alliance
bd_7ab8069417339df3 · schema v1 · pii pii-v1
Full breach record for Community Care Alliance →Community Care Alliance notified consumers of a data breach occurring July 1-5, 2024, discovered Jan 8, 2025. Unauthorized access potentially exposed PII (name, address, DOB, SSN, driver's license) and PHI (diagnoses, lab results, medications). 95,052 Rhode Island residents impacted. Third-party specialists engaged; credit monitoring offered.
Leak gap clock✗ Leak >180d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by rhysida about this victim predates this filing by 244 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_656d112c46633396Leak Siterhysidafiled 2024-07-06(244d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_5fc914b4b0fa00fbMaine State AGfiled 2025-03-07Verified
- bd_eddde174f903fd06Montana State AGfiled 2025-03-07Verified by operator
- bd_f2e045bf08be0a60HHS OCRfiled 2025-03-01(6d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-03-07-community-care-alliance-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 7, 2025
- Raw hash
- b4ebeaf3cd0e13f70a4d3f066e65fe247bfdde4b2f4b1dba79c16369132ddc00
Reporting entity
- Name
- Community Care Alliancenorm: community care alliance
- Domain
- communitycareri.org
Victim entity
- Name
- Community Care Alliancenorm: community care alliance
- Domain
- communitycareri.org
Incident
- Discovered
- Jan 8, 2025
- Materiality determined
- —
- Notification sent
- Mar 11, 2025
- Affected individuals
- 95,052
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with the Office of the Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- Leak >180dVT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.