HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCriticalContained
Apria Healthcare LLC
bd_a2be55087df28190 · schema v1 · pii pii-v1
Full breach record for Apria Healthcare LLC →Apria Healthcare LLC reported a breach affecting 1,869,598 individuals, including 7,162 Maine residents. The incident occurred between April 4, 2019, and October 10, 2021, and was discovered on October 1, 2021. The breach involved unauthorized external access (hacking) resulting in the acquisition of names, personal identifiers, and financial account numbers. Apria provided 12 months of identity theft protection and credit monitoring via Kroll.
Maine clockDiscovered Oct 1, 2021 → Filed with AG May 22, 2023598d ✗ ME AG >90d20 months discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_484942091b9acd62Oregon State AGfiled 2023-05-22Candidate
- bd_a0195e3f90a18f77Delaware State AGfiled 2023-05-22Verified
- bd_b9bdb6b76ef4907eDelaware State AGfiled 2023-05-22Verified
- bd_c1a512d17d99444fMontana State AGfiled 2023-05-22Verified
Show 3 more filings ↓Show fewer ↑up to 9d gap
- bd_ca14fb87d20497f2California State AGfiled 2023-05-22Verified
- bd_e12921387568e40fWashington State AGfiled 2023-05-22Verified
- bd_95d978c59636df32New Hampshire State AGfiled 2023-05-31(9d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bf218a4e-1ffd-4f14-a74d-3d34aec8d6c7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 22, 2023
- Raw hash
- 47d48c98853467d7a43b34a3098944b1374764c3a98e98a0c75467465637c323
Reporting entity
- Name
- Apria Homenorm: apria home
- Domain
- apriahome.com
Victim entity
- Name
- Apria Healthcare LLCnorm: apria healthcare
- Domain
- apria.com
Incident
- Discovered
- Oct 1, 2021
- Materiality determined
- —
- Notification sent
- May 22, 2023
- Affected individuals
- 1,869,598
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 months(598 days from discovery to filing)
- Compliance flags
- ME AG >90d · 598dME resident >180d · 598d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 1, 2021→ Filed with AG: May 22, 2023598d 90 days ME AG >90d Maine Discovered: Oct 1, 2021→ Notified: May 22, 2023598d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.