HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)HighContained

Anesthesia Services of San Joaquin PC

bd_9f1dc0acaf4a8ae3 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 24, 2022

Filed

Oct 25, 2022

To disclose

≤1 day

Affected · nationwide

43,9241 in this filing

Linked

4 filings

Confidence

65%

Full breach record for Anesthesia Services of San Joaquin PC →

Anesthesia Services Of San Joaquin PC reported an external system breach (hacking) occurring on July 9, 2022, discovered on October 24, 2022. The incident compromised the names and driver's license numbers of 43,924 individuals. The entity provided 12 months of credit monitoring and identity protection services through IDX to affected individuals.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 24, 2022 → Filed with AG Oct 25, 20221d ✓ ME AG ≤30d≤1 day discovery → filing

⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.

Incident timeline

undetected · 107 days

discovery → filing · ≤1 day / 1 days

Jul 9, 2022

Begins

Oct 24, 2022

Discovered

Oct 25, 2022

Filed

vs. sector median

12 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_cfbf7b9635ada9532022-10-25Verified
Montana State AGbd_435772c570670bff2022-10-24 · +1dCandidate
HHS OCRbd_38da7a9eacda20ff2022-09-23 · +32dCandidate

Name: Anesthesia Services of San Joaquin PC
norm: anesthesia services of san joaquin

Name: Anesthesia Services of San Joaquin PC
norm: anesthesia services of san joaquin
Industry: Healthcarellm

Discovered: Oct 24, 2022
Breach occurred: Jul 9, 2022
Undetected for: 107 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 24, 2022
Affected individuals: 43,924state + nationwide
Data types: Government IDIdentity (basic)
Data elements: Driver's licence number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed data breach notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Sent written notification to affected individuals
Offered 12 months of credit monitoring and identity protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(1 days from discovery to filing)
Compliance flags: ME AG ≤30d · 1d
Discovery-date grounding: notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 24, 2022
→ Filed with AG: Oct 25, 2022
1d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 24, 2022 → Filed with AG: Oct 25, 2022	1d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

HHS OCRSep 23 · first

Montana State AG+31d

California State AG+32d

Maine State AG+32d · this page

Pattern: first filing Sep 23 (NY), last Oct 25 (ME) — a 32-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/121c6feb-7ed1-4aeb-9d5b-6327590175a6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 25, 2022
Raw hash: e1d90738a5703f6d09659ee9d4b4a8482ec3ea61b4cf3ba1b710b073be584529

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAnesthesia Services of San Joaquin PC

Victim entityAnesthesia Services of San Joaquin PC

Incidentdiscovered Oct 24, 2022

Stated responseSent written notification to affected individuals

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov