HackingHealthcareHealthcareCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
FPS Medical Center
bd_d4881cb3fc5243cd · schema v1 · pii pii-v1
Full breach record for FPS Medical Center →FPS Medical Center, a healthcare organization, reported a data breach affecting 28,024 individuals, including 12 Maine residents. The breach, which occurred on February 28, 2022 and was discovered on March 3, 2022, was an external system breach (hacking). The compromised information includes names in combination with driver's license or non-driver identification card numbers. Affected residents were notified in writing on May 6, 2022. Identity theft protection services were not offered.
Maine clockDiscovered Mar 3, 2022 → Filed with AG May 6, 202264d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_ae76fe1982bc5306Montana State AGfiled 2022-05-06Verified
- bd_c5eae579b7c85400California State AGfiled 2022-05-06Verified
- bd_3bf201148f80f3e3HHS OCRfiled 2022-05-02(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ac91c193-6e4d-470f-bfd9-7ee2b7b60725.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 6, 2022
- Raw hash
- 68d18d0e73586a115ad2832bc33f87c8bd8df2a59257bb12ae21a6e7e0f11f27
Reporting entity
- Name
- FPS Medical Centernorm: fps medical center
- Domain
- fpsmedical.net
Victim entity
- Name
- FPS Medical Centernorm: fps medical center
- Domain
- fpsmedical.net
- Industry
- Healthcarellm
Incident
- Discovered
- Mar 3, 2022
- Materiality determined
- —
- Notification sent
- May 6, 2022
- Affected individuals
- 12
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- ME AG >30d · 64dME resident >60d · 64d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 3, 2022→ Filed with AG: May 6, 202264d 30 days (soft) ME AG >30d Maine Discovered: Mar 3, 2022→ Notified: May 6, 202264d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.