HackingHealthcareHealthcareCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIPHIPCICREDENTIALSIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Independence Advocates of Maine
bd_a157bd4c49c69f5e · schema v1 · pii pii-v1
Full breach record for Independence Advocates of Maine →Independence Advocates of Maine (a healthcare organization in Orono, ME) experienced an external system breach in April 2025 involving unauthorized access to its email environment. The breach was discovered on August 12, 2025. Potentially affected data includes names, dates of birth, government ID numbers (e.g., SSNs), financial account details, and health information. 99 Maine residents were affected. One year of Experian IdentityWorks credit monitoring was offered.
Maine clockDiscovered Aug 12, 2025 → Filed with AG Jan 13, 2026154d ✗ ME AG >90d22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed99 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6ebf2eab-a5be-4938-a27d-9cc8bb6122e5.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 13, 2026
- Raw hash
- d42d9b5c61042482f9ee12b554f9d859c562667893032b2d02c81fdddda44375
Reporting entity
- Name
- Independence Advocates of Mainenorm: independence advocates of maine
- Domain
- iamsupports.org
Victim entity
- Name
- Independence Advocates of Mainenorm: independence advocates of maine
- Domain
- iamsupports.org
- Industry
- Healthcarellm
Incident
- Discovered
- Aug 12, 2025
- Materiality determined
- —
- Notification sent
- Jan 12, 2025
- Affected individuals
- 99
- Data types
- PIIPHIPCICREDENTIALSIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 22 weeks(154 days from discovery to filing)
- Compliance flags
- ME AG >90d · 154d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 12, 2025→ Filed with AG: Jan 13, 2026154d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.