ACE Surgical Supply Co., Inc.
bd_ae9758955294443b · schema v1 · pii pii-v1
Full breach record for ACE Surgical Supply Co., Inc. →On June 29, 2021, ACE Surgical Supply Co., Inc. discovered it was the victim of a ransomware cyberattack in which company files were accessed without authorization. The company secured its systems, contacted the FBI, and began an investigation. An initial notification was sent on July 28, 2021, to three affected Maine residents. In September 2021, the investigation identified an additional 25 affected customers who are Maine residents. The compromised customer information included names, contact information, and DEA and physician state license numbers. A second round of written notifications, including an offer for credit monitoring services, was sent to affected Maine residents on October 6, 2021. The investigation is ongoing, and there is no evidence that the compromised information has been made public or used for identity theft.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0063ac3d9750d1d0Montana State AGfiled 2021-10-06(6d gap)Verified
- bd_4ca4fa02c4834460California State AGfiled 2021-11-19(38d gap)Verified
- bd_b29d69f2dc095b3bMaine State AGfiled 2021-11-19(38d gap)Verified
- bd_2c4ef2fc29484f46Maine State AGfiled 2021-07-28(76d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/71d884b6-3e28-4f64-8c2b-bfbcb012bd3d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 12, 2021
- Raw hash
- 856299179d50de7ec6f98079eebf802ce9a79784c88cd6fe8478cebfdcfcfe85
Reporting entity
- Name
- ACE Surgical Supply Co., Inc.norm: ace surgical supply
Victim entity
- Name
- ACE Surgical Supply Co., Inc.norm: ace surgical supply
Incident
- Discovered
- Jun 29, 2021
- Materiality determined
- —
- Notification sent
- Oct 6, 2021
- Affected individuals
- 28
- Data types
- IDENTITY_BASIC
- Attack vector
- Ransomware
Compliance
- Time to disclose
- 15 weeks(105 days from discovery to filing)
- Compliance flags
- ME AG >90d · 105dME resident >60d · 99d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 29, 2021→ Filed with AG: Oct 12, 2021105d 90 days ME AG >90d Maine Discovered: Jun 29, 2021→ Notified: Oct 6, 202199d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.