HackingCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTCriticalContained
Sandhills Medical Foundation
bd_b0d44c29b558587c · schema v1 · pii pii-v1
Full breach record for Sandhills Medical Foundation →Sandhills Medical Foundation, Inc. reported an external system breach (hacking) occurring on May 2, 2025, discovered on May 8, 2025. The incident affected 169,017 individuals, including 39 Maine residents. Affected data included names and personal identifiers combined with government IDs. The organization provided 12 months of identity theft protection services.
Maine clockDiscovered May 8, 2025 → Filed with AG Jun 3, 2026391d ✗ ME AG >90d13 months discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 5 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 397 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_cf1144d9d57c4749New Hampshire State AGfiled 2026-06-02(1d gap)Candidate
- bd_dd63827fbf969c24New Hampshire State AGfiled 2026-04-29(35d gap)Verified
- bd_fb38a941440b8970Vermont State AGfiled 2026-04-29(35d gap)Verified
- bd_838e2f76c0067c24South Carolina State AGfiled 2026-04-28(36d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0fc542de-6f37-4a1f-95b4-607cc8f19519.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 3, 2026
- Raw hash
- 2fb1f77a75b9847f3fa07402e3f05af061bb9708e01c4aedb77998b402564ed0
Reporting entity
- Name
- Sandhills Medical Foundationnorm: sandhills medical
- Domain
- sandhillsmedical.org
- Industry
- Healthcare
Victim entity
- Name
- Sandhills Medical Foundationnorm: sandhills medical
- Domain
- sandhillsmedical.org
- Industry
- Healthcare
Incident
- Discovered
- May 8, 2025
- Materiality determined
- —
- Notification sent
- Apr 28, 2026
- Affected individuals
- 169,017
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(391 days from discovery to filing)
- Compliance flags
- ME AG >90d · 391dME resident >180d · 355dLeak >180d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 8, 2025→ Filed with AG: Jun 3, 2026391d 90 days ME AG >90d Maine Discovered: May 8, 2025→ Notified: Apr 28, 2026355d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.