HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Fairfax Oral and Maxillofacial Surgery
bd_a3ef06b743dbf4b3 · schema v1 · pii pii-v1
Full breach record for Fairfax Oral and Maxillofacial Surgery →Fairfax Oral and Maxillofacial Surgery experienced an external system breach (hacking) on 05/15/2023, discovered on 09/14/2023. The incident affected 235,931 individuals, including 33 in Maine. Driver's license numbers and names were compromised. The entity provided written notification and 12 months of Experian Credit3B identity theft protection services.
Maine clockDiscovered Sep 14, 2023 → Filed with AG Oct 12, 202328d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_cd34df02272ee4abNew Hampshire State AGfiled 2023-10-13(1d gap)Verified
- bd_9606cba0447075dcMaine State AGfiled 2023-08-22(51d gap)Candidate
- bd_a6a1a00b18329708New Hampshire State AGfiled 2023-08-22(51d gap)Verified
- bd_d9a83af915c96720Montana State AGfiled 2023-08-22(51d gap)Candidate
Show 1 more filing ↓Show fewer ↑up to 90d gap
- bd_5d1869a4dbd9a400HHS OCRfiled 2023-07-14(90d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/17174f86-6775-4a51-b1d5-13b5f60e8ed5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 12, 2023
- Raw hash
- 47db6c3f04cc5fd1e23c60187d041b75e4f6a6964068ca72ba228ff2bbc1135d
Reporting entity
- Name
- Fairfax Oral and Maxillofacial Surgerynorm: fairfax oral and maxillofacial surgery
Victim entity
- Name
- Fairfax Oral and Maxillofacial Surgerynorm: fairfax oral and maxillofacial surgery
Incident
- Discovered
- Sep 14, 2023
- Materiality determined
- —
- Notification sent
- Aug 18, 2023
- Affected individuals
- 235,931
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 14, 2023→ Filed with AG: Oct 12, 202328d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.