HackingCustomer Data InvolvedIDENTITY_BASICLowContained
United Medical Systems (DE), Inc.
bd_b885f87de6d97c3f · schema v1 · pii pii-v1
Full breach record for United Medical Systems (DE), Inc. →United Medical Systems (DE), Inc. reported an external system breach (hacking) occurring on December 19, 2025, discovered on April 20, 2026. The incident affected 485 individuals, including 4 Maine residents. The organization notified affected parties in writing on May 20, 2026, and provided 12 months of credit and identity monitoring services through Kroll.
Maine clockDiscovered Apr 20, 2026 → Filed with AG May 20, 202630d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_8c9b95706ccdc2b9Indiana State AGfiled 2026-05-20Verified by operator
- bd_fa3dee1de26e213aNew Hampshire State AGfiled 2026-05-20Verified
- bd_d0385466ec4bfd74Massachusetts State AGfiled 2026-05-01(19d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c16b50a2-f6e8-4ac3-a6de-28f489f9be36.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 20, 2026
- Raw hash
- 331e42a7f0b3818128897c50ddf661a7cbdefc34e75118f908c2e1ee5ae3b2a9
Reporting entity
- Name
- United Medical Systems (DE), Inc.norm: united medical systems de
- Domain
- drivemedical.com
Victim entity
- Name
- United Medical Systems (DE), Inc.norm: united medical systems de
- Domain
- drivemedical.com
Incident
- Discovered
- Apr 20, 2026
- Materiality determined
- —
- Notification sent
- May 20, 2026
- Affected individuals
- 485
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 20, 2026→ Filed with AG: May 20, 202630d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.