HackingHealthcareHealthcareCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
TriValley Primary Care
bd_c3d99a75329756c9 · schema v1 · pii pii-v1
Full breach record for TriValley Primary Care →TriValley Primary Care, a healthcare organization, experienced an external system breach on October 11, 2021. The breach was discovered the same day and compromised the names and Social Security numbers of 122,806 individuals, including 6 residents of Maine. Affected individuals were notified on January 7, 2022, and offered 12 months of credit monitoring and identity theft protection services. This notification is a supplement to an original notice filed on November 23, 2021.
Maine clockDiscovered Oct 11, 2021 → Filed with AG Jan 6, 202287d ⏱ ME AG >30d12 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by groove about this victim predates this filing by 76 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_d568aa2fb9b57c25New Hampshire State AGfiled 2021-11-29(38d gap)Verified
- bd_a109c87c50e4d287Maine State AGfiled 2021-11-23(44d gap)Verified
- bd_db12c7445a73ebb6Montana State AGfiled 2021-11-23(44d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b25d259f-f2c9-4101-b83a-edc37c2671ee.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 6, 2022
- Raw hash
- 1e10a61e61d6ee70aa5a6eb28fa57c151442ac8aa2177107f4b6a11204b8d04c
Reporting entity
- Name
- TriValley Primary Carenorm: trivalley primary care
- Domain
- trivalleypc.com
- Industry
- Healthcare
Victim entity
- Name
- TriValley Primary Carenorm: trivalley primary care
- Domain
- trivalleypc.com
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Oct 11, 2021
- Materiality determined
- —
- Notification sent
- Jan 7, 2022
- Affected individuals
- 6
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 12 weeks(87 days from discovery to filing)
- Compliance flags
- ME AG >30d · 87dME resident >60d · 88dLeak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 11, 2021→ Filed with AG: Jan 6, 202287d 30 days (soft) ME AG >30d Maine Discovered: Oct 11, 2021→ Notified: Jan 7, 202288d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.