HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryPIIPHIIDENTITY_GOVERNMENTMediumContained
Greater Pittsburgh Orthopedic Associates
bd_efe761f8ec18ada7 · schema v1 · pii pii-v1
Full breach record for Greater Pittsburgh Orthopedic Associates →GPOA detected unauthorized network access on Aug 10, 2025 (breach date Aug 9, 2025). Forensic investigation found names, addresses, SSNs, and provider names of ~56,954 individuals (3 Maine residents) potentially compromised. Law enforcement notified; network hardened; credit monitoring via Cyberscout (TransUnion) offered.
Maine clockDiscovered Aug 10, 2025 → Filed with AG Feb 20, 2026194d ✗ ME AG >90d28 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by ransomhouse about this victim predates this filing by 647 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_89ae0f264e159c03Vermont State AGfiled 2026-02-20Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7c4ad0af-42cb-44bd-b608-3001327d9fc1.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 20, 2026
- Raw hash
- 05c003b2c205964efffd20fe7f1c2ad5cc5c81a7c9fd5be06e01720677cdbe57
Reporting entity
- Name
- Greater Pittsburgh Orthopedic Associatesnorm: greater pittsburgh orthopedic associates
- Domain
- gpoa.com
- Industry
- Healthcare
Victim entity
- Name
- Greater Pittsburgh Orthopedic Associatesnorm: greater pittsburgh orthopedic associates
- Domain
- gpoa.com
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Aug 10, 2025
- Materiality determined
- —
- Notification sent
- Feb 5, 2026
- Affected individuals
- 3
- Data types
- PIIPHIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Law enforcement notified
Compliance
- Time to disclose
- 28 weeks(194 days from discovery to filing)
- Compliance flags
- ME AG >90d · 194dLeak >180dME resident >60d · 179d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 10, 2025→ Filed with AG: Feb 20, 2026194d 90 days ME AG >90d Maine Discovered: Aug 10, 2025→ Notified: Feb 5, 2026179d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.