HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
HealthPlan Services, Inc.
bd_94a3989c86366ae4 · schema v1 · pii pii-v1
Full breach record for HealthPlan Services, Inc. →HealthPlan Services, Inc. reported an external system breach (hacking) occurring June 22-23, 2022, discovered March 21, 2023. The incident affected 9,457 individuals, including 1 Maine resident. Acquired data included names and Social Security Numbers. The entity, represented by McDonald Hopkins PLC, notified affected individuals in writing on April 28, 2023, and provided 24 months of identity theft protection services.
Maine clockDiscovered Mar 21, 2023 → Filed with AG Apr 28, 202338d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_00d4ed99b87ddc54HHS OCRfiled 2023-04-28Verified
- bd_6c49de945b104101California State AGfiled 2023-04-28Verified
- bd_b690a45d2dc172deMontana State AGfiled 2023-04-28Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/03135fd0-2c7c-408b-b52b-c93ed41fffdb.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 28, 2023
- Raw hash
- e44df6811028bdb46eb8ed13a334cb2af0fcdaecffa3bbc3e3d1e76f345a1b38
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
Victim entity
- Name
- HealthPlan Services, Inc.norm: healthplan services
Incident
- Discovered
- Mar 21, 2023
- Materiality determined
- —
- Notification sent
- Apr 28, 2023
- Affected individuals
- 9,457
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(38 days from discovery to filing)
- Compliance flags
- ME AG >30d · 38d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 21, 2023→ Filed with AG: Apr 28, 202338d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.