HackingCustomer Data InvolvedDownstream VictimsSupply Chain (3P Vendor)IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
CareTree
bd_ab9056e59a633901 · schema v1 · pii pii-v1
Full breach record for CareTree →CareTree, Inc., a third-party vendor, reported a data breach caused by a hacking incident. The breach was discovered on October 13, 2023, and is believed to have occurred on July 21, 2023. The incident resulted in the compromise of names and financial account details. CareTree notified affected individuals on December 11, 2023, and offered one year of credit monitoring and identity theft insurance services through Epiq.
Maine clockDiscovered Oct 13, 2023 → Filed with AG Dec 11, 202359d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_1f0e8136404e11ceNew Hampshire State AGfiled 2023-12-08(3d gap)Verified
- bd_44a69674e55b338cNew Hampshire State AGfiled 2023-12-27(16d gap)Verified
- bd_d3e5a7ef13ce1b8bVermont State AGfiled 2023-12-27(16d gap)Verified
- bd_339db28c04eef715HHS OCRfiled 2023-11-15(26d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 32d gap
- bd_97d6f0b94f215758New Hampshire State AGfiled 2024-01-12(32d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/51522faa-4a8d-4149-8429-4f9dc4c320bd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 11, 2023
- Raw hash
- d914116430685f9f0467a2937a08d1764a6b7d80d37220b96b53516322a24b91
Reporting entity
- Name
- CareTreenorm: caretree
Victim entity
- Name
- CareTreenorm: caretree
Incident
- Discovered
- Oct 13, 2023
- Materiality determined
- —
- Notification sent
- Dec 11, 2023
- Affected individuals
- 3
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- ME AG >30d · 59d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 13, 2023→ Filed with AG: Dec 11, 202359d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.