DisclosureLens
HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Caring Communities

bd_a9d76dec656e7a5c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 6, 2023

Filed

Sep 27, 2023

To disclose

16 weeks

Affected · nationwide

5711 in this filing

Linked

3 filings

Confidence

66%
Full breach record for Caring Communities2 incidents on file

Caring Communities, a healthcare entity based in Illinois, reported an external system breach (hacking) occurring on May 31, 2023, discovered on June 6, 2023. The incident affected 571 individuals total, including 1 Maine resident. Acquired data included names and Social Security Numbers. The entity provided written notification and offered 12 months of identity theft protection services.

Maine clockDiscovered Jun 6, 2023Filed with AG Sep 27, 2023113d ME AG >90d16 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 6 days
discovery → filing · 16 weeks / 113 days

May 31, 2023

Begins

Jun 6, 2023

Discovered

Sep 27, 2023

Filed

vs. sector median

+4 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Montana State AGSep 27 · first
Massachusetts State AGSep 27 · first
Maine State AGSep 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.