HackingHacking OtherSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedLow
Nationwide Recovery Services, Inc.
bd_efbd11eb7175f863 · schema v1 · pii pii-v1
Full breach record for Nationwide Recovery Services, Inc. →Harbin Clinic, LLC reported a data breach that occurred at its vendor, Nationwide Recovery Services, Inc. The incident, described as an external system breach (hacking), was discovered on March 20, 2025, and occurred on July 5, 2024. The breach affected 14 Maine residents, who were notified on May 16, 2025. Harbin Clinic offered 24 months of credit and identity monitoring services through Kroll to the affected individuals.
Maine clockDiscovered Mar 20, 2025 → Filed with AG May 16, 202557d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3d33de89fc823ff9California State AGfiled 2025-06-18(33d gap)Verified
- bd_c8ce5ede9daa4c73New Hampshire State AGfiled 2025-06-18(33d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7db239ab-e1a7-450f-a9fa-02a2f49ac9a7.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 16, 2025
- Raw hash
- df7924615be4f41dfdb4b2a91f8890323379fdc35f84feb09886390b0f77ee83
Reporting entity
- Name
- Harbin Clinic, LLCnorm: harbin clinic
Victim entity
- Name
- Nationwide Recovery Services, Inc.norm: nationwide recovery
Incident
- Discovered
- Mar 20, 2025
- Materiality determined
- —
- Notification sent
- May 16, 2025
- Affected individuals
- 14
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- ME AG >30d · 57d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 20, 2025→ Filed with AG: May 16, 202557d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.