HackingCustomer Data InvolvedPIIIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Union General Health System
bd_d8d24d88af5ebcdd · schema v1 · pii pii-v1
Full breach record for Union General Health System →General Health System, Inc. (Louisiana) reported an external system breach (hacking) occurring between June 24 and June 29, 2022, discovered on October 13, 2022. The incident affected 20,167 individuals, including 1 Maine resident. Acquired data included names and Social Security Numbers. The entity provided 12 months of credit monitoring and identity theft restoration through Equifax.
Maine clockDiscovered Oct 13, 2022 → Filed with AG Nov 4, 202222d ✓ ME AG ≤30d22 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_eddd3d9a9ada511fNew Hampshire State AGfiled 2022-11-08(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c4cf7967-9703-4a35-bcda-0782ff8eb5f3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 4, 2022
- Raw hash
- b9e23c6f7bb75d3dcf682a8ef85790b8bf721273e9181c8cd5d31f9f013e0c74
Reporting entity
- Name
- MASS GENERAL BRIGHAM INCORPORATEDnorm: mass general brigham
- Domain
- massgeneralbrigham.org
- Industry
- Healthcare
Victim entity
- Name
- Union General Health Systemnorm: union general health system
- Domain
- uniongeneralhealthsystem.com
- Industry
- Healthcare
Incident
- Discovered
- Oct 13, 2022
- Materiality determined
- —
- Notification sent
- Nov 4, 2022
- Affected individuals
- 20,167
- Data types
- PIIIDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 22d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 13, 2022→ Filed with AG: Nov 4, 202222d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.