HackingDelayed DiscoveryPIILowActive
Maine Health Behavioral Health
bd_c456930560d44652 · schema v1 · pii pii-v1
Full breach record for Maine Health Behavioral Health →Maine Health Behavioral Health, a healthcare entity in Sanford, ME, reported an external system breach (hacking) occurring on 01/01/2020 and discovered on 05/30/2026. Over 500 individuals, including residents, were affected. Notification was sent electronically on 06/11/2026. No identity theft protection services were offered.
Maine clockDiscovered May 30, 2026 → Filed with AG Jun 11, 202612d ✓ ME AG ≤30d12 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed500 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/afb9c10d-4750-4d7e-be49-09818a97920a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 11, 2026
- Raw hash
- 518a996b04beae1f0201604fbc687fdf3b553bfe25d9d26db95a8f82bf63b965
Reporting entity
- Name
- Maine Health Behavioral Healthnorm: maine health behavioral health
Victim entity
- Name
- Maine Health Behavioral Healthnorm: maine health behavioral health
Incident
- Discovered
- May 30, 2026
- Materiality determined
- —
- Notification sent
- Jun 11, 2026
- Affected individuals
- 500
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 days(12 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 12d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 30, 2026→ Filed with AG: Jun 11, 202612d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.