HackingCustomer Data InvolvedMedium
medQ, Inc.
bd_dcfa5a8e797d467d · schema v1 · pii pii-v1
Full breach record for medQ, Inc. →medQ, Inc., a healthcare technology company, experienced an external system breach that affected 54,353 individuals. The incident occurred between December 20, 2023, and December 26, 2023, and was discovered on the final day. Affected individuals were notified on February 23, 2024, and offered 12 months of credit monitoring services.
Maine clockDiscovered Dec 26, 2023 → Filed with AG Feb 23, 202459d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_5a44626b9e34f658California State AGfiled 2024-02-23Verified
- bd_bdb2089ed777401bIndiana State AGfiled 2024-02-23Verified
- bd_e84e7d460997ea88Montana State AGfiled 2024-02-23Verified
- bd_7756d64c62956c67California State AGfiled 2024-05-29(96d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e9da097c-b100-41c8-b6ab-f806ac951bb9.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 23, 2024
- Raw hash
- 98cf38ca590b3bb79cfc5e1866bfbbdc7a3b2015fb79b708f65f70794b8462c1
Reporting entity
- Name
- medQ, Inc.norm: medq
Victim entity
- Name
- medQ, Inc.norm: medq
Incident
- Discovered
- Dec 26, 2023
- Materiality determined
- —
- Notification sent
- Feb 23, 2024
- Affected individuals
- 54,353
- Data types
- —
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- ME AG >30d · 59d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 26, 2023→ Filed with AG: Feb 23, 202459d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.