AccidentalHealthcareRetail & ConsumerHealthcareMisdeliveryEmployee Data InvolvedCustomer Data InvolvedPIIIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
180 MEDICAL, INC.
bd_8c52d342f4d88ddf · schema v1 · pii pii-v1
Full breach record for 180 MEDICAL, INC. →On February 18, 2025, 180 Medical (a Convatec company) inadvertently sent an email containing employee W-2 information — including names, addresses, and Social Security numbers — to an unauthorized recipient. The incident was discovered the same day. One Maine resident was among 837 total individuals affected. Affected individuals were notified on February 24, 2025, and offered 24 months of Experian IdentityWorks credit monitoring.
Maine clockDiscovered Feb 18, 2025 → Filed with AG Feb 28, 202510d ✓ ME AG ≤30d10 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_6ed82345abbc1685Maryland State AGfiled 2025-02-24(4d gap)Verified
- bd_bf5698a7753a7cd7Indiana State AGfiled 2025-02-24(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/13185769-2356-48f4-915f-548d2bf1751a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2025
- Raw hash
- ee8954d7d9df3441436c33e34157456fc6fae8b71ca121bfca19c6e8ca011595
Reporting entity
- Name
- 180 MEDICAL, INC.norm: 180 medical
- Industry
- Other Commercial
Victim entity
- Name
- 180 MEDICAL, INC.norm: 180 medical
- Industry
- Other Commercial
- Industry
- HealthcarellmRetail & Consumerllm
Incident
- Discovered
- Feb 18, 2025
- Materiality determined
- —
- Notification sent
- Feb 24, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Insider
- Threat actor
- Internal
- Regulator citations
- Notified Maine Attorney General
- Initial access
- insider_action
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 10d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 18, 2025→ Filed with AG: Feb 28, 202510d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.