Social EngineeringPhishingTargetedIDENTITY_GOVERNMENTIDENTITY_BASICHighResolved
Adelda Health
bd_8cadec030dbe3ad5 · schema v1 · pii pii-v1
Full breach record for Adelda Health →Adelda Health, Inc. d/b/a Star Refining reported a phishing attack on April 29, 2021, affecting 1,910 individuals, including 4 Maine residents. The breach compromised names and driver's license numbers. The company notified affected individuals in writing on July 22, 2021, and provided 12 months of credit monitoring through Experian.
Maine clockDiscovered Apr 29, 2021 → Filed with AG Jul 21, 202183d ⏱ ME AG >30d12 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,910 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2bf0fd1c-87d1-45d8-82b1-2f3190cbdc26.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 21, 2021
- Raw hash
- 9f230ccc27a08672e858a68a15c3c86f7e27bfaccd7b2fd73a6ffa07e7389888
Reporting entity
- Name
- Adelda Healthnorm: adelda health
- Domain
- starrefining.com
Victim entity
- Name
- Adelda Healthnorm: adelda health
- Domain
- starrefining.com
Incident
- Discovered
- Apr 29, 2021
- Materiality determined
- —
- Notification sent
- Jul 22, 2021
- Affected individuals
- 1,910
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with Maine Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 12 weeks(83 days from discovery to filing)
- Compliance flags
- ME AG >30d · 83dME resident >60d · 84d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 29, 2021→ Filed with AG: Jul 21, 202183d 30 days (soft) ME AG >30d Maine Discovered: Apr 29, 2021→ Notified: Jul 22, 202184d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.