HackingHealthcareHealthcareCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Compumedics USA Inc.
bd_d7d73079b433971a · schema v1 · pii pii-v1
Full breach record for Compumedics USA Inc. →Compumedics USA Inc., a healthcare organization based in Charlotte, NC, discovered on April 11, 2025 that an unauthorized actor accessed its computer network and exfiltrated certain files between March 13 and March 24, 2025. The breach exposed names, Social Security numbers, and/or bank account numbers of 4 Maine residents. Notification letters were mailed May 8, 2025. Experian IdentityWorks credit monitoring was offered to affected individuals.
Maine clockDiscovered Apr 11, 2025 → Filed with AG May 8, 202527d ✓ ME AG ≤30d27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/838a9def-7fb7-40af-8e02-1e3c57206998.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 8, 2025
- Raw hash
- 8188898395a5351ef3b5b32b8044969011beddef3d73147eda37688fbbdba824
Reporting entity
- Name
- Compumedics USA Inc.norm: compumedics usa
- Industry
- Healthcare
Victim entity
- Name
- Compumedics USA Inc.norm: compumedics usa
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Apr 11, 2025
- Materiality determined
- Apr 11, 2025
- Notification sent
- May 8, 2025
- Affected individuals
- 4
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 27d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 11, 2025→ Filed with AG: May 8, 202527d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.