HackingCustomer Data InvolvedLow
Esse Health
bd_de426a2ba50bebf9 · schema v1 · pii pii-v1
Full breach record for Esse Health →Esse Health, a healthcare organization, reported an external system breach (hacking) that was discovered on April 21, 2025. The breach affected 18 Maine residents. The company provided written notification to affected individuals and offered 12 months of identity protection services through IDX.
Maine clockDiscovered Apr 21, 2025 → Filed with AG Jun 30, 202570d ⏱ ME AG >30d10 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0f559e2e21375925Vermont State AGfiled 2025-06-30Candidate
- bd_8579359a35c78237Indiana State AGfiled 2025-06-25(5d gap)Verified
- bd_f1219c8e28ac0ec0HHS OCRfiled 2025-06-20(10d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2374dd24-9fb6-41bf-ab1f-ce11920ffeb3.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2025
- Raw hash
- b20b02bdc75c04629a9e7dfece7a68ce568f02bbee40fa786c88cb2285faf9cc
Reporting entity
- Name
- Esse Healthnorm: esse health
- Industry
- healthcare
Victim entity
- Name
- Esse Healthnorm: esse health
- Industry
- healthcare
Incident
- Discovered
- Apr 21, 2025
- Materiality determined
- —
- Notification sent
- Jun 25, 2025
- Affected individuals
- 18
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- ME AG >30d · 70dME resident >60d · 65d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 21, 2025→ Filed with AG: Jun 30, 202570d 30 days (soft) ME AG >30d Maine Discovered: Apr 21, 2025→ Notified: Jun 25, 202565d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.