HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHigh
Greater Rochester Independent Practice Association, Inc.
bd_add1e3379cca25e9 · schema v1 · pii pii-v1
Full breach record for Greater Rochester Independent Practice Association, Inc. →Greater Rochester Independent Practice Association, Inc. experienced an external system breach that was discovered on May 31, 2023. The breach, which occurred on May 28, 2023, affected 1,742 individuals and compromised names and Social Security numbers. The organization provided written notification to those affected and offered 12 months of credit monitoring and identity restoration services through IDX.
Maine clockDiscovered May 31, 2023 → Filed with AG Oct 5, 2023127d ✗ ME AG >90d18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 85 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_f2c0167e4b2f11e0Montana State AGfiled 2023-10-05Verified
- bd_f85fb6667c7d0b6bNew Hampshire State AGfiled 2023-10-10(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f3d96627-e954-4f71-b465-2a4a88b00482.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 5, 2023
- Raw hash
- 5b1b50573589924929b5d95b61f8ec72acd7fb3c521a863ba399da12cccd7f15
Reporting entity
- Name
- Greater Rochester Independent Practice Association, Inc.norm: greater rochester independent practice
- Domain
- gripa.org
Victim entity
- Name
- Greater Rochester Independent Practice Association, Inc.norm: greater rochester independent practice
- Domain
- gripa.org
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- Oct 5, 2023
- Affected individuals
- 1,742
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 18 weeks(127 days from discovery to filing)
- Compliance flags
- ME AG >90d · 127dME resident >60d · 127dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 31, 2023→ Filed with AG: Oct 5, 2023127d 90 days ME AG >90d Maine Discovered: May 31, 2023→ Notified: Oct 5, 2023127d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.