HackingHealthcareHealthcareData PublishedCustomer Data InvolvedPHIPIILowContained
Heart South Cardiovascular Group
bd_dc4e83aef803c891 · schema v1 · pii pii-v1
Full breach record for Heart South Cardiovascular Group →Heart South Cardiovascular Group PC (Alabaster, AL) notified 3 Maine residents (46,666 total) of a cybersecurity incident. Around Nov 11, 2025, an unauthorized party claimed to possess and later posted limited Heart South data on the dark web. No confirmed network intrusion or data theft found. PHI potentially affected. Discovered Feb 12, 2026. Kroll identity monitoring offered 12 months.
Maine clockDiscovered Feb 12, 2026 → Filed with AG Apr 6, 202653d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by rhysida about this victim predates this filing by 146 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_2028c3f599016886Leak Siterhysidafiled 2025-11-10(146d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_718fd6945d5f1904New Hampshire State AGfiled 2026-04-13(7d gap)Verified
- bd_7927d296f02ce5dbHHS OCRfiled 2024-06-13(662d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ec29e611-132e-4e18-83ac-219721dd96de.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 6, 2026
- Raw hash
- a920703f37dc9db77682dc259310990b43ce89320a47f9d71de9add32129a215
Reporting entity
- Name
- Heart South Cardiovascular Groupnorm: heart south cardiovascular
- Domain
- heartsouthpc.com
- Industry
- Healthcare
Victim entity
- Name
- Heart South Cardiovascular Groupnorm: heart south cardiovascular
- Domain
- heartsouthpc.com
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Feb 12, 2026
- Materiality determined
- —
- Notification sent
- Apr 6, 2026
- Affected individuals
- 3
- Data types
- PHIPII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(53 days from discovery to filing)
- Compliance flags
- ME AG >30d · 53dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 12, 2026→ Filed with AG: Apr 6, 202653d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.