HackingCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTMediumContained
Capital Region Medical Center
bd_9adc7a8104cf5c60 · schema v1 · pii pii-v1
Full breach record for Capital Region Medical Center →Capital Region Medical Center, a healthcare organization, reported an external system breach (hacking) that occurred on December 17, 2021, and was discovered on December 24, 2021. The breach affected 7 Maine residents, involving the acquisition of names combined with driver's license or non-driver identification card numbers. The center began notifying affected individuals on March 24, 2022, and offered one year of complimentary credit monitoring services through Experian.
Maine clockDiscovered Dec 24, 2021 → Filed with AG Mar 25, 202291d ✗ ME AG >90d13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_c8480a3cbc771a48Montana State AGfiled 2022-03-25Candidate
- bd_7ab7349dfcd1fd47HHS OCRfiled 2022-03-11(14d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4ca66c3f-bb86-49a7-8983-705875e64d86.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2022
- Raw hash
- 4a188bce5bb80c230a72360f7da9789ca7df1ffd96a184ee7ff147f77eac2e0b
Reporting entity
- Name
- Capital Region Medical Centernorm: capital region medical center
- Domain
- crmc.org
Victim entity
- Name
- Capital Region Medical Centernorm: capital region medical center
- Domain
- crmc.org
Incident
- Discovered
- Dec 24, 2021
- Materiality determined
- —
- Notification sent
- Mar 24, 2022
- Affected individuals
- 7
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 13 weeks(91 days from discovery to filing)
- Compliance flags
- ME AG >90d · 91dME resident >60d · 90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 24, 2021→ Filed with AG: Mar 25, 202291d 90 days ME AG >90d Maine Discovered: Dec 24, 2021→ Notified: Mar 24, 202290d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.