DisclosureLens
MalwareHealthcareHealthcareRansomwareData EncryptedGovernment IDIdentity (basic)CriticalContained

Deer Oaks Behavioral Health

bd_d934d79eb772ef04 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Sep 2, 2023

Filed

Oct 31, 2023

To disclose

8 weeks

Affected · nationwide

171,871460 in this filing

Linked

4 filings

Confidence

64%
Full breach record for Deer Oaks Behavioral Health →2 incidents on file

Deer Oaks, a behavioral health provider, reported a ransomware incident occurring on September 1, 2023, discovered on September 2, 2023. The breach affected 171,871 individuals nationwide, including 460 Maine residents. Compromised data included names and driver's license numbers. The organization provided 24 months of credit monitoring services.

Maine clockDiscovered Sep 2, 2023 → Filed with AG Oct 31, 202359d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days
discovery → filing · 8 weeks / 59 days

Sep 1, 2023

Begins

Sep 2, 2023

Discovered

Oct 31, 2023

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Montana State AGOct 31 · first
Indiana State AGOct 31 · first
Maine State AGOct 31 · first · this page
New Hampshire State AG+6d

Pattern: first filing Oct 31 (MT), last Nov 6 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.