HackingHealthcareHealthcareCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHILowContained
Community Nurse
bd_9bf2483307755284 · schema v1 · pii pii-v1
Full breach record for Community Nurse →Community Nurse notified Maine residents of a breach at its billing/document vendor Doctor Alliance. Unauthorized access occurred Oct 31–Nov 17, 2025; discovered ~Mar 2, 2026. PHI exposed: names, addresses, DOB, Medicare numbers, medical record numbers, diagnoses, medications, treatment orders. SSNs not involved. 7 Maine residents affected; 6,746 total.
Maine clockDiscovered Mar 2, 2026 → Filed with AG Mar 12, 202610d ✓ ME AG ≤30d10 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8744b5e8af8269cdNew Hampshire State AGfiled 2026-03-12Verified
- bd_d2a3275a6cfa49eeHHS OCRfiled 2026-03-12Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/19fe8eed-d3d2-4cb8-ba57-d99492f81ad1.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 12, 2026
- Raw hash
- 7bb12b18dc09753718d692b4173e86233068faf4318ae9b7276cfc788ad0e25b
Reporting entity
- Name
- Community Nursenorm: community nurse
- Industry
- Healthcare
Victim entity
- Name
- Community Nursenorm: community nurse
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Mar 2, 2026
- Materiality determined
- Mar 2, 2026
- Notification sent
- Mar 11, 2026
- Affected individuals
- 7
- Data types
- PIIPHI
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified law enforcement
- Third party
- via Doctor Alliance
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 10d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 2, 2026→ Filed with AG: Mar 12, 202610d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.