MalwareRansomwareRansom DemandedCustomer Data InvolvedIDENTITY_GOVERNMENTMediumContained
Apeo
bd_bee5bb09abb911b1 · schema v1 · pii pii-v1
Full breach record for Apeo →APEO, LLC, a healthcare organization, experienced a ransomware attack on April 25, 2023, which was discovered on December 11, 2023. The breach affected 85 Maine residents, compromising their names and driver's license or non-driver identification card numbers. The company began notifying impacted individuals on February 22, 2024, and offered 24 months of identity theft protection services through CyberScout by TransUnion.
Maine clockDiscovered Dec 11, 2023 → Filed with AG Feb 26, 202477d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0ee434c0aaee7446Montana State AGfiled 2024-02-26Candidate
- bd_e33f08a26adc7f02New Hampshire State AGfiled 2024-02-26Verified
- bd_42e95da00ecb77aeIndiana State AGfiled 2024-02-22(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/98bddbcb-2743-4c06-88b8-d94677e0e69f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 26, 2024
- Raw hash
- 17f74b775a30ec18cc07ddc1af4666a240201a4dbde6089c8532ef642f63b945
Reporting entity
- Name
- Apeonorm: apeo
Victim entity
- Name
- Apeonorm: apeo
Incident
- Discovered
- Dec 11, 2023
- Materiality determined
- —
- Notification sent
- Feb 22, 2024
- Affected individuals
- 85
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Ransomware
Compliance
- Time to disclose
- 11 weeks(77 days from discovery to filing)
- Compliance flags
- ME AG >30d · 77dME resident >60d · 73d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 11, 2023→ Filed with AG: Feb 26, 202477d 30 days (soft) ME AG >30d Maine Discovered: Dec 11, 2023→ Notified: Feb 22, 202473d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.