HackingHealthcareHealthcareCustomer Data InvolvedIDENTITY_GOVERNMENTMediumContained
St. Mary's Healthcare System for Children
bd_8da1ec82b5ecf5f0 · schema v1 · pii pii-v1
Full breach record for St. Mary's Healthcare System for Children →St. Mary's Healthcare System for Children, Inc. reported an external system breach that occurred and was discovered on November 9, 2023. The breach affected 4 Maine residents, with a total of 5,650 individuals impacted. The compromised data includes names and Social Security Numbers. The company notified the affected individuals on March 20, 2024, and offered 12 months of credit monitoring and identity restoration services through Epiq.
Maine clockDiscovered Nov 9, 2023 → Filed with AG Mar 20, 2024132d ✗ ME AG >90d19 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3503a949559a2f2bNew Hampshire State AGfiled 2024-03-20Verified
- bd_e95fc46d59c378c2Indiana State AGfiled 2024-03-20Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b278a349-61e5-4c57-8564-1fa5ff26f56b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 20, 2024
- Raw hash
- d8281d5ac3d6626a0be8a8f5b1cd8bf2fcac2ce29be6daab9d399d867e1810e6
Reporting entity
- Name
- St. Mary's Healthcare System for Childrennorm: st mary s healthcare system for children
Victim entity
- Name
- St. Mary's Healthcare System for Childrennorm: st mary s healthcare system for children
- Industry
- Healthcarellm
Incident
- Discovered
- Nov 9, 2023
- Materiality determined
- —
- Notification sent
- Mar 20, 2024
- Affected individuals
- 4
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 19 weeks(132 days from discovery to filing)
- Compliance flags
- ME AG >90d · 132dME resident >60d · 132d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 9, 2023→ Filed with AG: Mar 20, 2024132d 90 days ME AG >90d Maine Discovered: Nov 9, 2023→ Notified: Mar 20, 2024132d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.