HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Associated Eyecare
bd_a1df2442f80aa68c · schema v1 · pii pii-v1
Full breach record for Associated Eyecare →Associated Eye Care, a healthcare entity based in Stillwater, Minnesota, reported a data breach to the Maine Attorney General. The breach, occurring on November 24, 2020, and discovered on May 16, 2022, involved an external system hack. One individual's name and Social Security Number were compromised. The entity provided written notification and 12 months of credit monitoring and identity theft protection services.
Maine clockDiscovered May 16, 2022 → Filed with AG Jul 8, 202253d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_107e137abc7fdf6eHHS OCRfiled 2022-07-08Verified
- bd_67a21d1afbd4437cMontana State AGfiled 2022-07-08Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/138a45f4-ed90-4030-a109-fe73fb79e3f1.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 8, 2022
- Raw hash
- 2de12ae59418a1f88ce7f878b3ab7c00e98b9c19ac7bf2155bf8c66b459179ad
Reporting entity
- Name
- Associated Eyecarenorm: associated eyecare
Victim entity
- Name
- Associated Eyecarenorm: associated eyecare
Incident
- Discovered
- May 16, 2022
- Materiality determined
- —
- Notification sent
- Jul 8, 2022
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(53 days from discovery to filing)
- Compliance flags
- ME AG >30d · 53d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 16, 2022→ Filed with AG: Jul 8, 202253d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.