MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCriticalContained
Maternal and Family Health Services
bd_92fcf80f1a78c010 · schema v1 · pii pii-v1
Full breach record for Maternal and Family Health Services →Maternal and Family Health Services experienced a ransomware breach between August 21, 2021, and April 4, 2022, discovered on April 4, 2022. The incident affected 461,070 individuals, including 68 Maine residents. The breach involved the encryption of data and exfiltration of names, government identifiers, and financial account numbers. The entity provided 12 months of credit monitoring and ID protection services to affected individuals.
Maine clockDiscovered Apr 4, 2022 → Filed with AG Jan 10, 2023281d ✗ ME AG >90d40 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a8ce7b5233375eebCalifornia State AGfiled 2023-01-10Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aa8282f5-0293-41fe-8074-d62e568e05ac.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 10, 2023
- Raw hash
- 9689b5b1f4998d46fd8a17545a509840f14e9fd6258462c1cf9ad8d9a89132fb
Reporting entity
- Name
- FisherBroyles LLPnorm: fisherbroyles
Victim entity
- Name
- Maternal and Family Health Servicesnorm: maternal and family health
Incident
- Discovered
- Apr 4, 2022
- Materiality determined
- —
- Notification sent
- Jan 3, 2023
- Affected individuals
- 461,070
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Initial access
- external_remote_services
Compliance
- Time to disclose
- 40 weeks(281 days from discovery to filing)
- Compliance flags
- ME AG >90d · 281dME resident >180d · 274d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 4, 2022→ Filed with AG: Jan 10, 2023281d 90 days ME AG >90d Maine Discovered: Apr 4, 2022→ Notified: Jan 3, 2023274d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.