HackingHealthcareProfessional ServicesHealthcareCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
SysInformation Healthcare Services, Inc.
bd_b6be72836a476f89 · schema v1 · pii pii-v1
Full breach record for SysInformation Healthcare Services, Inc. →SysInformation Healthcare Services, Inc. (d/b/a EqualizeRCM), a revenue cycle and billing services provider, experienced unauthorized access to certain files and folders within its network between June 3–18, 2023. The breach was discovered September 13, 2024, and affected individuals were notified on October 4, 2024. One Maine resident was affected. Compromised data included names and variable personal information. IDX identity protection services (12 months) were offered.
Maine clockDiscovered Sep 13, 2024 → Filed with AG Oct 10, 202427d ✓ ME AG ≤30d27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0b78b46cfff5cc8dVermont State AGfiled 2024-10-29(19d gap)Verified
- bd_0fdbad83d099a492California State AGfiled 2024-10-29(19d gap)Verified
- bd_4e3382893d03266fMaine State AGfiled 2024-10-29(19d gap)Verified
- bd_502dadec6642b714New Hampshire State AGfiled 2024-10-29(19d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a7165a1d-907f-413c-86cd-ed4ae1038b9d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 10, 2024
- Raw hash
- 9de1e5d9e2c498154a7012f7693689476b4c557aee86b87ee4cdc7c58aec85c4
Reporting entity
- Name
- SysInformation Healthcare Services, Inc.norm: sysinformation healthcare
- Domain
- sysinformation.com
- Industry
- Professional services — revenue cycle and billing services
Victim entity
- Name
- SysInformation Healthcare Services, Inc.norm: sysinformation healthcare
- Domain
- sysinformation.com
- Industry
- Professional services — revenue cycle and billing services
- Industry
- HealthcarellmProfessional Servicesllm
Incident
- Discovered
- Sep 13, 2024
- Materiality determined
- —
- Notification sent
- Oct 4, 2024
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported to law enforcement and regulators as required by law
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 27d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 13, 2024→ Filed with AG: Oct 10, 202427d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.