HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
NationsBenefits Holdings, LLC
bd_be7b07047f2e066a · schema v1 · pii pii-v1
Full breach record for NationsBenefits Holdings, LLC →NationsBenefits Holdings, LLC, a healthcare entity based in Florida, reported an external system breach (hacking) occurring between January 30, 2023, and February 7, 2023. The breach was discovered on February 13, 2023. The incident affected 19,386 Maine residents, with the total number of affected individuals listed as TBD. The data acquired included names and Social Security Numbers. The entity notified consumer reporting agencies and sent written notifications to affected individuals, offering 24 months of Experian IdentityWorks.
Maine clockDiscovered Feb 13, 2023 → Filed with AG May 5, 202381d ⏱ ME AG >30d12 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_90ff9cd7813fad7cOregon State AGfiled 2023-05-01(4d gap)Verified
- bd_5cf8474b7cde8f07California State AGfiled 2023-04-14(21d gap)Verified
- bd_1b538b7a6b069a1eVermont State AGfiled 2023-04-13(22d gap)Verified
- bd_27eb698b3f802e52Montana State AGfiled 2023-04-13(22d gap)Candidate
Show 2 more filings ↓Show fewer ↑up to 22d gap
- bd_7a3042e338cc1200New Hampshire State AGfiled 2023-04-13(22d gap)Verified
- bd_e00425fe19d51b10Delaware State AGfiled 2023-04-13(22d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cc06cdee-0715-4eea-8b33-c391dba8fe5e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 5, 2023
- Raw hash
- 6c3ff5fee76c6b7e04d1135a60e96c50d8b7a99625fea8e229ea2d0e8f2991cf
Reporting entity
- Name
- NationsBenefits Holdings, LLCnorm: nationsbenefits holdings
- Industry
- Healthcare
Victim entity
- Name
- NationsBenefits Holdings, LLCnorm: nationsbenefits holdings
- Industry
- Healthcare
Incident
- Discovered
- Feb 13, 2023
- Materiality determined
- —
- Notification sent
- Apr 13, 2023
- Affected individuals
- 19,386
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(81 days from discovery to filing)
- Compliance flags
- ME AG >30d · 81d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 13, 2023→ Filed with AG: May 5, 202381d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.