HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHigh
OrthoAlaska, LLC
bd_7b82937d6cbd8307 · schema v1 · pii pii-v1
Full breach record for OrthoAlaska, LLC →OrthoAlaska, LLC reported a data breach affecting 161,130 individuals, which was discovered on November 14, 2022. The breach occurred on September 6, 2022, and was described as an external system breach or hacking incident. The compromised information included names and financial account or credit/debit card numbers along with their corresponding security codes or PINs. The company began notifying affected individuals on November 11, 2023, and offered 12 months of identity theft protection services through IDX.
Maine clockDiscovered Nov 14, 2022 → Filed with AG Oct 13, 2023333d ✗ ME AG >90d48 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_8fae6c27242b6c07California State AGfiled 2023-10-13Verified
- bd_c52da3c2c9a6fa5aOregon State AGfiled 2023-10-13Candidate
- bd_2243577418f9038aNew Hampshire State AGfiled 2023-10-12(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/29e7dc48-81ff-4eb9-802d-2b59d6b1274c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 13, 2023
- Raw hash
- 9759ca379e684468b29dae924b5fc2ee333260a9b3988c560d0b63084e0f8563
Reporting entity
- Name
- OrthoAlaska, LLCnorm: orthoalaska
Victim entity
- Name
- OrthoAlaska, LLCnorm: orthoalaska
Incident
- Discovered
- Nov 14, 2022
- Materiality determined
- —
- Notification sent
- Nov 11, 2023
- Affected individuals
- 161,130
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 48 weeks(333 days from discovery to filing)
- Compliance flags
- ME AG >90d · 333dME resident >180d · 362d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 14, 2022→ Filed with AG: Oct 13, 2023333d 90 days ME AG >90d Maine Discovered: Nov 14, 2022→ Notified: Nov 11, 2023362d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.