DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDHighContained

AMH Health, LLC and AMH Health Plans of Mail

bd_bd262163f572dd20 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 5, 2022

Filed

Sep 28, 2022

To disclose

8 weeks

Affected · nationwide

13,40660 in this filing

Confidence

50%
Full breach record for AMH Health, LLC and AMH Health Plans of Mail →

AMH Health, LLC and AMH Health Plans of Mail, a healthcare organization, reported a data breach to the Maine Attorney General. The breach, which occurred on May 7, 2022, and was discovered on August 5, 2022, was an external system breach (hacking). The incident affected 60 Maine residents. The compromised information included names in combination with Social Security Numbers. In response, the company offered two years of identity theft protection services through Experian's IdentityWorks. Consumers were notified in writing on September 30, 2022.

Maine clockDiscovered Aug 5, 2022 → Filed with AG Sep 28, 202254d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 90 days
discovery → filing · 8 weeks / 54 days

May 7, 2022

Begins

Aug 5, 2022

Discovered

Sep 28, 2022

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed13,406 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.