MultipleHealthcareHealthcarePrivilege AbuseTheftIdentity (basic)PHIFinancial accountFinancial credentialsMedium

Concierge Care NP

bd_bf983085f2c64bd0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 7, 2023

Filed

Sep 26, 2023

To disclose

19 days

Affected · nationwide

1,058800 in this filing

Confidence

65%

Full breach record for Concierge Care NP →

Healthcare provider Concierge Care NP reported a data breach impacting 1,058 individuals. The incident, discovered on September 7, 2023, involved both employees and external individuals accessing the company's electronic health records. The compromised information includes names, financial account numbers, and medical or insurance details. Affected individuals were notified electronically on September 8, 2023.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 7, 2023 → Filed with AG Sep 26, 202319d ✓ ME AG ≤30d19 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days

discovery → filing · 19 days

Sep 6, 2023

Begins

Sep 7, 2023

Discovered

Sep 26, 2023

Filed

vs. sector median

10 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,058 affectedView incident

Name: Concierge Care NP
norm: concierge care np

Name: Concierge Care NP
norm: concierge care np
Industry: Healthcarellm

Discovered: Sep 7, 2023
Breach occurred: Sep 6, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Sep 8, 2023
Affected individuals: 1,058state + nationwide
Data types: Identity (basic)PHIFinancial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unknown
Threat actor: Multiple

Time to disclose: 19 days(19 days from discovery to filing)
Compliance flags: ME AG ≤30d · 19d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 7, 2023
→ Filed with AG: Sep 26, 2023
19d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 7, 2023 → Filed with AG: Sep 26, 2023	19d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/db945c9d-4fd5-475d-a988-0c94b6f2abb9.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 26, 2023
Raw hash: febd874069ba4e5cc8db7fbbf136fb2f9223559ff05f4e8e91ee155ee1cc2ad7

Reporting entityConcierge Care NP

Victim entityConcierge Care NP

Incidentdiscovered Sep 7, 2023

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov