HackingCustomer Data InvolvedPIIIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Mountain View Family Practice, PC
bd_9c16ac7f4abc4aa8 · schema v1 · pii pii-v1
Full breach record for Mountain View Family Practice, PC →Mountain View Family Practice, PC, a healthcare provider located in Baldwinville, MA, reported an external system breach (hacking) occurring between June 10 and June 11, 2023. The breach was discovered on July 30, 2023, affecting a total of 5,139 individuals, including 9 Maine residents. The incident involved the acquisition of names and Social Security Numbers. The entity provided written notification on August 31, 2023, and offered 24 months of credit monitoring services through IDX.
Maine clockDiscovered Jul 30, 2023 → Filed with AG Aug 31, 202332d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0a57141c7e660bb6New Hampshire State AGfiled 2023-08-31Verified
- bd_2bef1ff3f1a0282fVermont State AGfiled 2023-08-31Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6769ecba-b25c-4782-9d71-ed8207399f52.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 31, 2023
- Raw hash
- 6709237a150ee6e5adb29c3b45c358aef4e0a54552c3bfaaa80d3ca74ba0dc00
Reporting entity
- Name
- Mountain View Family Practice, PCnorm: mountain view family practice
- Domain
- mvfppc.com
- Industry
- Healthcare
Victim entity
- Name
- Mountain View Family Practice, PCnorm: mountain view family practice
- Domain
- mvfppc.com
- Industry
- Healthcare
Incident
- Discovered
- Jul 30, 2023
- Materiality determined
- —
- Notification sent
- Aug 31, 2023
- Affected individuals
- 5,139
- Data types
- PIIIDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 30, 2023→ Filed with AG: Aug 31, 202332d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.