Morris Hospital & Healthcare Centers
bd_c57ca867432e837a · schema v1 · pii pii-v1
Full breach record for Morris Hospital & Healthcare Centers →Morris Hospital & Healthcare Centers, a healthcare provider based in Morris, Illinois, reported an external system breach (hacking) occurring on April 4, 2023, discovered on June 20, 2023. The incident compromised the personal information of 248,943 individuals, including names and Social Security Numbers. The organization notified affected individuals in writing on August 17, 2023, and provided 12 months of credit monitoring and identity restoration services through Experian. The Maine Attorney General's office received the breach notification, covering 25 affected Maine residents.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_16c69f0d514cbd18California State AGfiled 2023-08-17Verified
- bd_8b00c8d9a79b225dVermont State AGfiled 2023-08-17Verified
- bd_8e26a3940f345506Montana State AGfiled 2023-08-17Verified
- bd_947fe245f50af0a8HHS OCRfiled 2023-08-17Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/160ceb23-3a5e-42d2-b466-d14a9581bc48.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 17, 2023
- Raw hash
- 3349a868e193b5b09ff237698a89afc4c288b5fc4ce582d1280f8d5534c050ba
Reporting entity
- Name
- Morris Hospital & Healthcare Centersnorm: morris hospital healthcare centers
Victim entity
- Name
- Morris Hospital & Healthcare Centersnorm: morris hospital healthcare centers
Incident
- Discovered
- Jun 20, 2023
- Materiality determined
- —
- Notification sent
- Aug 17, 2023
- Affected individuals
- 248,943
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with the Maine Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- ME AG >30d · 58d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 20, 2023→ Filed with AG: Aug 17, 202358d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.