HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Aspire Health Alliance
bd_d71c7f7b939e3410 · schema v1 · pii pii-v1
Full breach record for Aspire Health Alliance →Aspire Health Alliance, a healthcare entity based in Braintree, MA, experienced an external system breach (hacking) on September 13, 2023. The incident was discovered on February 26, 2024, affecting 17,490 individuals, including 22 Maine residents. The breach compromised names and Social Security Numbers. Aspire Health Alliance notified affected individuals in writing on April 26, 2024, and offered 12 months of credit and dark web monitoring, along with identity theft recovery services.
Maine clockDiscovered Feb 26, 2024 → Filed with AG Apr 26, 202460d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a63c59f5993b43c6HHS OCRfiled 2024-04-26Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/09d00fc2-7b9d-4022-a830-647076514170.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 26, 2024
- Raw hash
- 37e85b912d8d045a49a9d952fb2ce88f3541d0fca7a47ddab747820741abcabb
Reporting entity
- Name
- Constangy, Brooks, Smith & Prophete, LLPnorm: constangy brooks smith prophete
Victim entity
- Name
- Aspire Health Alliancenorm: aspire health alliance
Incident
- Discovered
- Feb 26, 2024
- Materiality determined
- —
- Notification sent
- Apr 26, 2024
- Affected individuals
- 17,490
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- ME AG >30d · 60d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 26, 2024→ Filed with AG: Apr 26, 202460d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.