HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryPIIPHILowContained
ANNA JAQUES HOSPITAL
bd_a2d1f21ff5fd6dad · schema v1 · pii pii-v1
Full breach record for ANNA JAQUES HOSPITAL →Anna Jaques Hospital (Newburyport, MA) experienced an external system breach (hacking) discovered on December 22, 2023, with the breach occurring on December 25, 2023. The incident affected 316,342 individuals in total, including 637 Maine residents. The hospital reset passwords and updated information security policies following the breach. Affected individuals were notified on December 5, 2024, and offered 24-month Experian IdentityWorks Credit 3B monitoring.
Maine clockDiscovered Dec 22, 2023 → Filed with AG Dec 5, 2024349d ✗ ME AG >90d50 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by moneymessage about this victim predates this filing by 320 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_b79385a89ec65c17Leak Sitemoneymessagefiled 2024-01-19(320d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_70918698b29d68ceIndiana State AGfiled 2024-12-05Verified
- bd_86baa33310a3dfbeVermont State AGfiled 2024-12-05Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ecfcfbba-9bcf-4909-ab3b-2cd996e79cfa.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 5, 2024
- Raw hash
- 9d42dcf96ec6720cc56755fe41fa559124fdda5a48135d981633feec69295168
Reporting entity
- Name
- ANNA JAQUES HOSPITALnorm: anna jaques hospital
- Industry
- Healthcare
Victim entity
- Name
- ANNA JAQUES HOSPITALnorm: anna jaques hospital
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Dec 22, 2023
- Materiality determined
- —
- Notification sent
- Dec 5, 2024
- Affected individuals
- 637
- Data types
- PIIPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 50 weeks(349 days from discovery to filing)
- Compliance flags
- ME AG >90d · 349dME resident >180d · 349dLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 22, 2023→ Filed with AG: Dec 5, 2024349d 90 days ME AG >90d Maine Discovered: Dec 22, 2023→ Notified: Dec 5, 2024349d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.