HackingCustomer Data InvolvedIDENTITY_GOVERNMENTMediumContained
Cardiovascular Associates Holdings, LP
bd_c613160ae6c07cfd · schema v1 · pii pii-v1
Full breach record for Cardiovascular Associates Holdings, LP →Cardiovascular Associates, a healthcare organization, reported an external system breach (hacking) that occurred between November 28, 2022, and December 5, 2022. The breach was discovered on February 16, 2023. The compromised information includes names and Social Security numbers. A total of 441,640 individuals were affected, including 2 Maine residents. Affected individuals were notified on March 17, 2023, and offered 12 months of credit monitoring and identity theft protection services through IDX.
Maine clockDiscovered Feb 16, 2023 → Filed with AG Mar 17, 202329d ✓ ME AG ≤30d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_1e18382a04b09a26California State AGfiled 2023-03-17Verified
- bd_cd85f8eca6803424New Hampshire State AGfiled 2023-02-06(39d gap)Verified
- bd_3101fb359642d7d3California State AGfiled 2023-02-03(42d gap)Candidate
- bd_489906bb2eebc73fVermont State AGfiled 2023-02-03(42d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 42d gap
- bd_bfd43f9919ac6f72Montana State AGfiled 2023-02-03(42d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/851a60e1-ed5d-4a80-a02e-9beea8980256.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 17, 2023
- Raw hash
- 2f240ed77dcf50a162fa196a139114f18f9d2dd2fedd66347cb5593d16bc2f69
Reporting entity
- Name
- Cardiovascular Associates Holdings, LPnorm: cardiovascular associates
Victim entity
- Name
- Cardiovascular Associates Holdings, LPnorm: cardiovascular associates
Incident
- Discovered
- Feb 16, 2023
- Materiality determined
- —
- Notification sent
- Mar 17, 2023
- Affected individuals
- 2
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 16, 2023→ Filed with AG: Mar 17, 202329d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.