HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumActive
MCLAREN HEALTH CARE CORPORATION
bd_e37f582cfe47b024 · schema v1 · pii pii-v1
Full breach record for MCLAREN HEALTH CARE CORPORATION →McLaren Health Care notified the Idaho Attorney General on November 9, 2023, of unauthorized network access occurring between July 28 and August 23, 2023. The incident potentially affected 107 Idaho residents, exposing names, Social Security numbers, and health information. McLaren engaged forensic specialists, notified law enforcement, and provided 12 months of credit monitoring to affected individuals.
Leak gap clock⏱ Leak >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
A leak claim by alphv about this victim predates this filing by 40 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_6326acdfc9de458aLeak Sitealphvfiled 2023-10-04(35d gap)Verified by operator
- bd_c4b2c0198b70501eLeak Sitealphvfiled 2023-09-29(40d gap)Verified
Regulatory filings (4) · sorted by filing gap
- bd_8d2f2b3098afeb79California State AGfiled 2023-11-09Verified by operator
- bd_bd9b0633195a292fMontana State AGfiled 2023-11-09Verified by operator
- bd_c24689bd6cff46e0Maine State AGfiled 2023-11-09Verified
- bd_18c5455f0815045bHHS OCRfiled 2023-10-20(20d gap)Verified
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2023/11/11-9-2023-McLaren-Health-Care.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 9, 2023
- Raw hash
- da4a78052fcebba55da1c44eb64073a9bcad9ac47a5dcb0f635f3006d86c6990
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- MCLAREN HEALTH CARE CORPORATIONnorm: mclaren health care
- Domain
- mclaren.org
Incident
- Discovered
- Aug 22, 2023
- Materiality determined
- —
- Notification sent
- Nov 9, 2023
- Affected individuals
- 107
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Idaho Attorney General Consumer Protection Division
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(79 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.