MalwareTechnologyHealthcareInformationRansomwareRansom DemandedData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

Gaia Software LLC

bd_ee00f47ec9a92fe7 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 5, 2024

Filed

Jun 28, 2024

To disclose

21 weeks

Affected · nationwide

21,8662 in this filing

Linked

7 filings

Confidence

66%

Full breach record for Gaia Software LLC →2 incidents on file

Gaia Software LLC, a software vendor for AMERICARE RENAL CENTER LLC HD, experienced a ransomware attack between Jan 27 and Feb 5, 2024. The incident potentially exposed patient PII (SSN, DOB, health info) of 21,866 Maine residents. Gaia engaged forensic investigators, secured its network, and provided 12 months of credit monitoring. Notices were sent on June 28, 2024.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 5, 2024 → Filed with AG Jun 28, 2024144d ✗ ME AG >90d21 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 9 days

discovery → filing · 21 weeks / 144 days

Jan 27, 2024

Begins

Feb 5, 2024

Discovered

Jun 28, 2024

Filed

vs. sector median

+2 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

New Hampshire State AGbd_8fcedc3d23ee23b02024-06-28Verified
Massachusetts State AGbd_96830e28db2788962024-06-28Verified
Vermont State AGbd_e8f5e0199c84c0142024-06-28Candidate
Indiana State AGbd_ec3e0ad62243d3052024-06-28Verified

Show 2 more filings ↓up to 63d gap

Illinois State AGbd_ff253cef1f952f382024-06-01 · +27dVerified
Montana State AGbd_13756db037dce6f42024-08-30 · +63dVerified

Name: Gaia Software LLC
norm: gaia software

Name: Gaia Software LLC
norm: gaia software
Industry: TechnologyllmHealthcarellm

Discovered: Feb 5, 2024
Breach occurred: Jan 27, 2024 – Feb 5, 2024
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 28, 2024
Affected individuals: 21,866state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Engaged external cybersecurity experts
Secured network environment
Launched thorough investigation
Reviewed and enhanced policies and procedures
Changes made: Implementing additional safeguards and enhanced security measures
Providing 12 months of complimentary credit monitoring and identity theft restoration services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(144 days from discovery to filing)
Compliance flags: ME AG >90d · 144dME resident >60d · 144d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 5, 2024
→ Filed with AG: Jun 28, 2024
144d 90 days ME AG >90d
Maine
Discovered: Feb 5, 2024
→ Notified: Jun 28, 2024
144d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 5, 2024 → Filed with AG: Jun 28, 2024	144d	90 days	ME AG >90d
Maine	Discovered: Feb 5, 2024 → Notified: Jun 28, 2024	144d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGJun 1 · first

New Hampshire State AG+27d

Massachusetts State AG+27d

Vermont State AG+27d

Indiana State AG+27d

Maine State AG+27d · this page

Montana State AG+90d

Pattern: first filing Jun 1 (IL), last Aug 30 (MT) — a 90-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4fe544a2-fced-4d3b-9b4f-f5e4f808c596.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 28, 2024
Raw hash: 7b6d7d6b3edd67ec525f9e8b5528e17f7aec1b6e5ec3f60a056733942fdfc833

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityGaia Software LLC

Victim entityGaia Software LLC

Incidentdiscovered Feb 5, 2024

Stated responseEngaged external cybersecurity experts

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov