HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
GATEWAY REHABILITATION CENTER
bd_b6bd6c502fbaca93 · schema v1 · pii pii-v1
Full breach record for GATEWAY REHABILITATION CENTER →Gateway Rehabilitation Center, a non-profit organization, reported an external system breach that occurred on June 13, 2022, and was discovered on September 21, 2022. The breach compromised the names and Social Security numbers of 12 Maine residents. In response, the company offered 12 months of credit and dark web monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services through IDX. Consumer notifications were sent on November 18, 2022.
Maine clockDiscovered Sep 21, 2022 → Filed with AG Nov 18, 202258d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by blackbyte about this victim predates this filing by 135 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_f6493c4126c29b05Leak Siteblackbytefiled 2022-07-06(135d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_05ee2fe15ab13820HHS OCRfiled 2022-11-18Candidate
- bd_9fb984e36d34b4a7New Hampshire State AGfiled 2022-11-18Verified
- bd_e1861cbb398ac64dMontana State AGfiled 2022-11-17(1d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b112c946-f278-49f7-9317-e44880da762e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 18, 2022
- Raw hash
- d521b214b648a123472f3da78b96e74a81534728670b80e469a8b7048ff8d28b
Reporting entity
- Name
- GATEWAY REHABILITATION CENTERnorm: gateway rehabilitation center
Victim entity
- Name
- GATEWAY REHABILITATION CENTERnorm: gateway rehabilitation center
Incident
- Discovered
- Sep 21, 2022
- Materiality determined
- —
- Notification sent
- Nov 18, 2022
- Affected individuals
- 12
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- ME AG >30d · 58dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 21, 2022→ Filed with AG: Nov 18, 202258d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.