HackingHealthcareHealthcareStolen CredentialsCapture App DataCustomer Data InvolvedDelayed DiscoveryPIILowResolved
Health Care For All
bd_bf792420108b13c4 · schema v1 · pii pii-v1
Full breach record for Health Care For All →Health Care For All (Boston, MA) reported unauthorized access to an employee email account between September 28 and October 17, 2024. The breach was discovered March 12, 2025, and 1 Maine resident was among the 60 total individuals potentially affected. Personal information contained within the email account may have been exposed. Consumer notification was sent May 9, 2025, with 24 months of credit monitoring offered via Equifax.
Maine clockDiscovered Mar 12, 2025 → Filed with AG May 9, 202558d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/97c0487e-2f51-49b8-97aa-bc8a1e33b6fa.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 9, 2025
- Raw hash
- 109d1d557a3859b9986f45089bb5d6a74e6cad8278b7fb0f5c00676ed85cd973
Reporting entity
- Name
- Health Care For Allnorm: health care for all
- Domain
- hcfama.org
- Industry
- Healthcare
Victim entity
- Name
- Health Care For Allnorm: health care for all
- Domain
- hcfama.org
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Mar 12, 2025
- Materiality determined
- —
- Notification sent
- May 9, 2025
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- ME AG >30d · 58d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 12, 2025→ Filed with AG: May 9, 202558d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.