DisclosureLens
MalwareHealthcareHealthcareRansomwareRansom DemandedCustomer Data InvolvedFinancial accountFinancial credentialsLowResolved

Florida Heart Associates

bd_eabdb07b7e06a061 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 19, 2021

Filed

Jul 30, 2021

To disclose

10 weeks

Affected

39scope not determined

Linked

7 filings

Confidence

50%
Full breach record for Florida Heart Associates

Florida Heart Associates reported a ransomware attack that occurred on May 9, 2021. The breach was discovered on May 19, 2021, and affected approximately 45,148 individuals in total, including 39 Maine residents. The compromised information includes names and financial account numbers or credit/debit card numbers with their security codes. The organization notified the affected individuals on July 15, 2021.

Maine clockDiscovered May 19, 2021Filed with AG Jul 30, 202172d ME AG >30d10 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 10 days
discovery → filing · 10 weeks / 72 days

May 9, 2021

Begins

May 19, 2021

Discovered

Jul 30, 2021

Filed

vs. sector median

2 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 23d gap

Filing propagation · 6 filings · 5 states

View merged incident ↗
HHS OCRJul 7 · first
Maine State AG+23d · this page

Pattern: first filing Jul 7 (FL), last Jul 30 (ME) — a 23-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.