DisclosureLens
PhysicalHealthcareHealthcareTheftCustomer Data InvolvedDelayed DiscoveryPIILowResolved

Penquis Cap

bd_937e898e4103758a · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 12, 2024

Filed

Jun 27, 2025

To disclose

15 months

Affected

3state residents only

Confidence

84%
Full breach record for Penquis Cap →2 incidents on file

Penquis CAP, a healthcare organization in Dexter, ME, reported a breach involving the loss or theft of a device or media (computer, laptop, external hard drive, thumb drive, CD, tape, etc.). The breach occurred on 06/27/2025 and was discovered on 04/12/2024, affecting 3 Maine residents. Notification was provided by telephone on 06/27/2025. No identity theft protection services were offered.

Maine clockDiscovered Apr 12, 2024 → Filed with AG Jun 27, 2025441d ✗ ME AG >90d15 months discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

Jun 27, 2025

Begins

Jun 27, 2025

Filed

vs. sector median

+50 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.