HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Community Medical Centers
bd_bc9de75eacdce63f · schema v1 · pii pii-v1
Full breach record for Community Medical Centers →Community Medical Centers, Inc. reported an external system breach (hacking) on October 10, 2021, affecting 656,047 individuals. The breach compromised names and Social Security Numbers. The company notified affected individuals in writing on November 2, 2021, and provided 12 months of credit monitoring and identity theft protection services through Kroll. Eight Maine residents were specifically identified as affected.
Maine clockDiscovered Oct 10, 2021 → Filed with AG Oct 29, 202119d ✓ ME AG ≤30d19 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_2a9b84c69baef15fHHS OCRfiled 2021-10-26(3d gap)Verified
- bd_45d13dc4f2513a14California State AGfiled 2021-10-26(3d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/219cad16-9e33-47b6-9cdf-0e9949e25aa6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 29, 2021
- Raw hash
- 8eaace80c6eb9baaac6aa5a790d5621d2aeaa382d3742c1ae5c7627621dfb051
Reporting entity
- Name
- Community Medical Centersnorm: community medical centers
Victim entity
- Name
- Community Medical Centersnorm: community medical centers
Incident
- Discovered
- Oct 10, 2021
- Materiality determined
- —
- Notification sent
- Nov 2, 2021
- Affected individuals
- 656,047
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 19d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 10, 2021→ Filed with AG: Oct 29, 202119d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.