HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighResolved
TriValley Primary Care
bd_a109c87c50e4d287 · schema v1 · pii pii-v1
Full breach record for TriValley Primary Care →TriValley Primary Care reported an external system breach (hacking) on 10/11/2021 affecting 57,596 individuals, including 10 Maine residents. SSNs and names were compromised. Notification was sent on 11/24/2021, offering 1 year of credit monitoring via Sontiq.
Maine clockDiscovered Oct 11, 2021 → Filed with AG Nov 23, 202143d ⏱ ME AG >30d6 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by groove about this victim predates this filing by 32 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_db12c7445a73ebb6Montana State AGfiled 2021-11-23Candidate
- bd_d568aa2fb9b57c25New Hampshire State AGfiled 2021-11-29(6d gap)Verified
- bd_c3d99a75329756c9Maine State AGfiled 2022-01-06(44d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fc958a29-1639-4cd3-b73c-2db33cb1d88f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 23, 2021
- Raw hash
- 9937aa737eaa100a37f860bf1e62f0da29b603e26aea7ca967f148da9ead4885
Reporting entity
- Name
- TriValley Primary Carenorm: trivalley primary care
- Domain
- trivalleypc.com
Victim entity
- Name
- TriValley Primary Carenorm: trivalley primary care
- Domain
- trivalleypc.com
Incident
- Discovered
- Oct 11, 2021
- Materiality determined
- —
- Notification sent
- Nov 24, 2021
- Affected individuals
- 57,596
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- ME AG >30d · 43dLeak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 11, 2021→ Filed with AG: Nov 23, 202143d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.