HackingCustomer Data InvolvedPIIIDENTITY_BASICMediumContained
Clarinda Regional Health Center
bd_8c15e8d2a940b204 · schema v1 · pii pii-v1
Full breach record for Clarinda Regional Health Center →Clarinda Regional Health Center, a healthcare provider located in Clarinda, Iowa, reported an external system breach (hacking) occurring on October 6, 2025, discovered on December 15, 2025. The incident affected 24,341 individuals, including one Maine resident. The organization notified affected individuals in writing on June 2, 2026, and provided TransUnion credit monitoring and identity protection services.
Maine clockDiscovered Dec 15, 2025 → Filed with AG Jun 3, 2026170d ✗ ME AG >90d24 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 6 about the same incident.View merged incident
A leak claim by lockbit5 about this victim predates this filing by 238 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_f146826d713c3bc0Leak Sitelockbit5filed 2025-10-08(238d gap)Verified by operator
Regulatory filings (4) · sorted by filing gap
- bd_37dfc805ee34f57cNew Hampshire State AGfiled 2026-06-01(2d gap)Verified
- bd_5ab406081578f5a7Massachusetts State AGfiled 2026-06-01(2d gap)Candidate
- bd_c83dd89c82f2e71dIowa State AGfiled 2026-06-01(2d gap)Verified
- bd_563f62e663ef1c80HHS OCRfiled 2026-03-25(70d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/48305a42-d02d-4d6e-bfe3-4ae21ef7d206.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 3, 2026
- Raw hash
- 5060c18a48bf8afb6a5c6859648752644eb4746c79b4f51500f698ea3f87cc07
Reporting entity
- Name
- Clarinda Regional Health Centernorm: clarinda regional health center
- Domain
- clarindahealth.com
Victim entity
- Name
- Clarinda Regional Health Centernorm: clarinda regional health center
- Domain
- clarindahealth.com
Incident
- Discovered
- Dec 15, 2025
- Materiality determined
- —
- Notification sent
- Jun 2, 2026
- Affected individuals
- 24,341
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 24 weeks(170 days from discovery to filing)
- Compliance flags
- ME AG >90d · 170dLeak >180dME resident >60d · 169d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 15, 2025→ Filed with AG: Jun 3, 2026170d 90 days ME AG >90d Maine Discovered: Dec 15, 2025→ Notified: Jun 2, 2026169d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.