HackingCustomer Data InvolvedLowContained
Greater Cincinnati Behavioral Health
bd_af604ff30818615e · schema v1 · pii pii-v1
Full breach record for Greater Cincinnati Behavioral Health →Greater Cincinnati Behavioral Health Services reported a data breach affecting 62,036 individuals, including 3 Maine residents. The breach, which occurred from December 9 to December 10, 2023, was discovered on December 10, 2023, and involved an external system breach (hacking). The company offered 12 months of credit monitoring and identity theft restoration services to those affected.
Maine clockDiscovered Dec 10, 2023 → Filed with AG Sep 11, 2024276d ✗ ME AG >90d39 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by dragonforce about this victim predates this filing by 273 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_41132c496638b1b9Leak Sitedragonforcefiled 2023-12-13(273d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_94597d00252f3111Maine State AGfiled 2024-06-13(90d gap)Verified by operator
- bd_a0db490ef29f1fdbHHS OCRfiled 2024-02-02(222d gap)Verified
- bd_f65e62cc431b5ba1Indiana State AGfiled 2024-01-25(230d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1031e729-c3c0-4898-97ec-8e52e25a2daf.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 11, 2024
- Raw hash
- 746312ccc5cef741f3b6d2719c570584b6bcc6f173787506e6f52f8189b0d8a8
Reporting entity
- Name
- Greater Cincinnati Behavioral Healthnorm: greater cincinnati behavioral health
- Domain
- gcbhs.com
Victim entity
- Name
- Greater Cincinnati Behavioral Healthnorm: greater cincinnati behavioral health
- Domain
- gcbhs.com
Incident
- Discovered
- Dec 10, 2023
- Materiality determined
- —
- Notification sent
- Sep 10, 2024
- Affected individuals
- 3
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 39 weeks(276 days from discovery to filing)
- Compliance flags
- ME AG >90d · 276dME resident >180d · 275dLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 10, 2023→ Filed with AG: Sep 11, 2024276d 90 days ME AG >90d Maine Discovered: Dec 10, 2023→ Notified: Sep 10, 2024275d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.