HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Comprehensive Health Services
bd_7b6e34bd70633bad · schema v1 · pii pii-v1
Full breach record for Comprehensive Health Services →Comprehensive Health Services reported a data breach affecting 602 Maine residents. The breach, which occurred between April 9, 2020, and October 22, 2020, was discovered on September 30, 2020. The incident involved an external system breach (hacking), resulting in the acquisition of names and Social Security numbers. The company began notifying affected individuals on February 15, 2022, and offered 12 to 24 months of credit monitoring and identity theft protection services through Equifax.
Maine clockDiscovered Sep 30, 2020 → Filed with AG Mar 16, 2022532d ✗ ME AG >90d18 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_3287d556e934a6bdNew Hampshire State AGfiled 2022-03-15(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/737a3acf-6fde-4b8e-b9db-49e9aca6828c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 16, 2022
- Raw hash
- c49a2054e97be8e958e87aee83f28ee259ae3c3b3e315f0134ae96d59d51f9a0
Reporting entity
- Name
- Comprehensive Health Servicesnorm: comprehensive health
Victim entity
- Name
- Comprehensive Health Servicesnorm: comprehensive health
- Industry
- Healthcare
Incident
- Discovered
- Sep 30, 2020
- Materiality determined
- —
- Notification sent
- Feb 15, 2022
- Affected individuals
- 602
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 18 months(532 days from discovery to filing)
- Compliance flags
- ME AG >90d · 532dME resident >180d · 503d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 30, 2020→ Filed with AG: Mar 16, 2022532d 90 days ME AG >90d Maine Discovered: Sep 30, 2020→ Notified: Feb 15, 2022503d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.