HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Central Texas Medical Specialists, PLLC
bd_a2803d728e2e776f · schema v1 · pii pii-v1
Full breach record for Central Texas Medical Specialists, PLLC →Central Texas Medical Specialists PLLC (dba Austin Cancer Centers) reported an external system breach (hacking) occurring on July 21, 2021, discovered on August 4, 2021. The incident affected 36,503 individuals, including 7 Maine residents. Acquired data included names and Social Security Numbers. The entity provided written notification and offered one year of Equifax Credit WatchTM Gold identity protection services.
Maine clockDiscovered Aug 4, 2021 → Filed with AG Sep 15, 202142d ⏱ ME AG >30d6 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4a8292046d1f79a0HHS OCRfiled 2021-09-10(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c821e44a-6e15-47ee-8ab5-9f1ebd9119f1.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 15, 2021
- Raw hash
- 156f0f73c84f5d432ba8690e6f8d8f1b2033391cea50f955996514365c662584
Reporting entity
- Name
- Central Texas Medical Specialists, PLLCnorm: central texas medical specialists
- Industry
- Healthcare
Victim entity
- Name
- Central Texas Medical Specialists, PLLCnorm: central texas medical specialists
- Industry
- Healthcare
Incident
- Discovered
- Aug 4, 2021
- Materiality determined
- —
- Notification sent
- Aug 27, 2021
- Affected individuals
- 36,503
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- ME AG >30d · 42d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 4, 2021→ Filed with AG: Sep 15, 202142d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.