HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDCriticalContained

REGIONAL CARE OF ROGERS, LLC

bd_9136a94a45daec34 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Nov 8, 2024

Filed

Dec 16, 2024

To disclose

5 weeks

Affected · nationwide

225,728145 in this filing

Linked

9 filings

Confidence

66%

Full breach record for REGIONAL CARE OF ROGERS, LLC →

Regional Care, Inc. reported a data breach affecting 225,728 individuals, including 145 Maine residents. Unauthorized access occurred between September 13-18, 2024, and was discovered on November 8, 2024. The incident involved the potential acquisition of personal information, including government identifiers. Notices were sent on December 16, 2024, offering 12 months of Equifax credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Nov 8, 2024 → Filed with AG Dec 16, 202438d ⏱ ME AG >30d5 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 56 days

discovery → filing · 5 weeks / 38 days

Sep 13, 2024

Begins

Nov 8, 2024

Discovered

Dec 16, 2024

Filed

vs. sector median

6 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

New Hampshire State AGbd_116ea9b6cd53e04a2024-12-16Verified
Massachusetts State AGbd_11fd58f6cee523182024-12-16Verified
Washington State AGbd_415a61c906124d0f2024-12-16Verified
California State AGbd_46dc2c6dcada51fc2024-12-16Verified

Show 4 more filings ↓up to 15d gap

Vermont State AGbd_af65ae4d51784af32024-12-16Verified
Montana State AGbd_d2a71d51a5ee73b42024-12-16Verified
HHS OCRbd_ed7c62dc9c46a5e62024-12-17 · +1dVerified
Illinois State AGbd_481baaa2e3b92a002024-12-01 · +15dCandidate

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: REGIONAL CARE OF ROGERS, LLC
norm: regional care of rogers
Industry: Healthcarellm

Discovered: Nov 8, 2024
Breach occurred: Sep 13, 2024 – Sep 18, 2024
Undetected for: 56 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 16, 2024
Affected individuals: 225,728state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Filed notification with Maine Attorney General
Initial access: valid_credentials

During the incident: Shut down the account
Contained the incident
Engaged leading cybersecurity experts to identify what personal information, if any, was involved
Offering a complimentary membership of identity theft protection services through Equifax
Changes made: Continually evaluate and modify its practices to enhance the security and privacy of its personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(38 days from discovery to filing)
Compliance flags: ME AG >30d · 38d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Nov 8, 2024
→ Filed with AG: Dec 16, 2024
38d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Nov 8, 2024 → Filed with AG: Dec 16, 2024	38d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGDec 1 · first

New Hampshire State AG+15d

Massachusetts State AG+15d

Washington State AG+15d

California State AG+15d

Vermont State AG+15d

Montana State AG+15d

Maine State AG+15d · this page

HHS OCR+16d

Pattern: first filing Dec 1 (IL), last Dec 17 (NE) — a 16-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b76b9e24-3713-4701-9fe4-cd0dfe396076.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 16, 2024
Raw hash: d46200b00c7b91882a75fde2efdae79da719bb94f03c17da48409a7f3e053de0

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityREGIONAL CARE OF ROGERS, LLC

Incidentdiscovered Nov 8, 2024

Stated responseShut down the account

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov