HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Harvard Pilgrim Health Care
bd_9dcb7294e442d8b9 · schema v1 · pii pii-v1
Full breach record for Harvard Pilgrim Health Care →Harvard Pilgrim Health Care reported an external system breach (hacking) occurring on March 28, 2023, discovered on April 17, 2023. The incident affected 2,632,275 individuals, including 993 Maine residents. Acquired data included names and Social Security Numbers. The company provided written notifications and offered 24 months of identity theft protection services.
Maine clockDiscovered Apr 17, 2023 → Filed with AG Feb 15, 2024304d ✗ ME AG >90d43 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_2cfb222c1f723d12New Hampshire State AGfiled 2024-02-15Verified
- bd_718a015221cd2671California State AGfiled 2024-02-15Verified
- bd_75a606d40f78de2eDelaware State AGfiled 2024-02-15Candidate
- bd_6228e5282fce1211Maine State AGfiled 2024-03-27(41d gap)Verified
Show 4 more filings ↓Show fewer ↑up to 41d gap
- bd_653dd03a96a63057Delaware State AGfiled 2024-03-27(41d gap)Verified
- bd_c229892302105957New Hampshire State AGfiled 2024-03-27(41d gap)Verified
- bd_dbc80eaf19d4bfa1California State AGfiled 2024-03-27(41d gap)Verified
- bd_e3cbbfda0c66639bVermont State AGfiled 2024-03-27(41d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0c15442a-20d1-4fe6-81c2-c7eef893208e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 15, 2024
- Raw hash
- 69327c874f19d0074778cb1a1c8ade6ec8e6c9679c4aaedd03c0ef8647c1b881
Reporting entity
- Name
- Harvard Pilgrim Health Carenorm: harvard pilgrim health care
- Domain
- point32health.org
Victim entity
- Name
- Harvard Pilgrim Health Carenorm: harvard pilgrim health care
- Domain
- point32health.org
Incident
- Discovered
- Apr 17, 2023
- Materiality determined
- —
- Notification sent
- Jun 15, 2023
- Affected individuals
- 2,632,275
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 43 weeks(304 days from discovery to filing)
- Compliance flags
- ME AG >90d · 304d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 17, 2023→ Filed with AG: Feb 15, 2024304d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.