HackingBusiness Associate (HIPAA)Customer Data InvolvedPIIIDENTITY_GOVERNMENTMedium
St. Bernards Healthcare
bd_da1a5e49ca1f7319 · schema v1 · pii pii-v1
Full breach record for St. Bernards Healthcare →Welltok, Inc., a business associate of St. Bernards Healthcare, Inc., reported a data breach affecting 89,556 individuals, including 2 Maine residents. The breach, which occurred on May 30, 2023, was an external system hacking incident discovered on October 18, 2023. The compromised information includes names and Social Security numbers. Affected individuals were notified on November 13, 2023, and offered 24 months of identity theft and restoration services.
Maine clockDiscovered Oct 18, 2023 → Filed with AG Nov 13, 202326d ✓ ME AG ≤30d26 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4d5e9333-1688-49c8-8a4e-cee4be344e15.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2023
- Raw hash
- eadb705069460c3e4500cac200897cbbe4541614576b4e3ff042f422ef80a2c7
Reporting entity
- Name
- Welltoknorm: welltok
- Domain
- welltok.com
Victim entity
- Name
- St. Bernards Healthcarenorm: st bernards healthcare
- Industry
- Healthcare
Incident
- Discovered
- Oct 18, 2023
- Materiality determined
- —
- Notification sent
- Nov 13, 2023
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 26d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 18, 2023→ Filed with AG: Nov 13, 202326d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.