HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumResolved
Sturdy Memorial Hospital
bd_d06b1a7d671c6f59 · schema v1 · pii pii-v1
Full breach record for Sturdy Memorial Hospital →Sturdy Memorial Hospital reported an external hacking incident that occurred on February 9, 2021, and was discovered on April 21, 2021. The breach affected 42,336 individuals, compromising names and financial account or credit/debit card numbers with their associated security codes or PINs. The hospital began notifying affected individuals on May 28, 2021, and offered two years of credit and identity monitoring services from Experian.
Maine clockDiscovered Apr 21, 2021 → Filed with AG May 28, 202137d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_b01dcc773e331f70Montana State AGfiled 2021-05-28Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e06bf21b-904b-407c-9893-272f28f83734.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2021
- Raw hash
- 8f43ca65d380afa05c5f10809b9b57a208993e8fa42288a8d515cac47857fbcc
Reporting entity
- Name
- Sturdy Memorial Hospitalnorm: sturdy memorial hospital
Victim entity
- Name
- Sturdy Memorial Hospitalnorm: sturdy memorial hospital
Incident
- Discovered
- Apr 21, 2021
- Materiality determined
- —
- Notification sent
- May 28, 2021
- Affected individuals
- 42,336
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- ME AG >30d · 37d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 21, 2021→ Filed with AG: May 28, 202137d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.