HackingCustomer Data InvolvedDelayed DiscoveryMedium
Grand River Medical Group
bd_b1dfa9db3f811958 · schema v1 · pii pii-v1
Full breach record for Grand River Medical Group →Healthcare provider Grand River Medical Group, P.C. experienced an external system breach between October 19 and October 22, 2020. The incident was discovered on October 22, 2020, with potential data compromise confirmed by a forensic firm on December 15, 2020. The breach affected 37,858 individuals, who were notified in February 2021. The company offered 12 months of identity protection services to those affected.
Maine clockDiscovered Oct 22, 2020 → Filed with AG Feb 12, 2021113d ✗ ME AG >90d16 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_a7d66cecca5a4d51HHS OCRfiled 2021-02-12Candidate
- bd_8ce8af789d4021bcMontana State AGfiled 2021-02-08(4d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/deb9cb32-65aa-44e1-94c0-951e3b0d461c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 12, 2021
- Raw hash
- b190812209d16cf41eb4f7368779bfba31e2152fe33a7ce69ce0576c296c9e40
Reporting entity
- Name
- Grand River Medical Groupnorm: grand river medical
Victim entity
- Name
- Grand River Medical Groupnorm: grand river medical
Incident
- Discovered
- Oct 22, 2020
- Materiality determined
- —
- Notification sent
- Feb 8, 2021
- Affected individuals
- 37,858
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 16 weeks(113 days from discovery to filing)
- Compliance flags
- ME AG >90d · 113dME resident >60d · 109d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 22, 2020→ Filed with AG: Feb 12, 2021113d 90 days ME AG >90d Maine Discovered: Oct 22, 2020→ Notified: Feb 8, 2021109d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.