HackingCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalResolved
Medscan Laboratory, Inc. (Adaptive Health Integrations
bd_c14fd9a9345cf970 · schema v1 · pii pii-v1
Full breach record for Medscan Laboratory, Inc. (Adaptive Health Integrations →Medscan Laboratory, Inc. reported an external system breach occurring on 10/17/2021, discovered on 02/23/2022. The incident affected 510,574 individuals, including 1,295 Maine residents. Compromised data included names and Social Security Numbers. The company notified affected individuals and provided 12 months of identity protection services via Kroll.
Maine clockDiscovered Feb 23, 2022 → Filed with AG Apr 18, 202254d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed510,574 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/27f276b6-4975-47a5-9e67-91a9081a530f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 18, 2022
- Raw hash
- 19a2507ddfad0fd9be71e354edf32dbbf376c4d0303eefe6e27b4ad00f3ba777
Reporting entity
- Name
- Medscan Laboratory, Inc. (Adaptive Health Integrationsnorm: medscan laboratory inc adaptive health integrations
- Industry
- Healthcare
Victim entity
- Name
- Medscan Laboratory, Inc. (Adaptive Health Integrationsnorm: medscan laboratory inc adaptive health integrations
- Industry
- Healthcare
Incident
- Discovered
- Feb 23, 2022
- Materiality determined
- —
- Notification sent
- Apr 12, 2022
- Affected individuals
- 510,574
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified consumer reporting agencies
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(54 days from discovery to filing)
- Compliance flags
- ME AG >30d · 54d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 23, 2022→ Filed with AG: Apr 18, 202254d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.