HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
Aspire Rural Health System
bd_f022d87963b7c861 · schema v1 · pii pii-v1
Full breach record for Aspire Rural Health System →Aspire Rural Health System (Cass City, MI) suffered an external network breach from ~Nov 4, 2024 to ~Jan 6, 2025. Discovered July 18, 2025 after investigation. Unauthorized party accessed/acquired files containing personal information. 138,386 total individuals affected; 4 Maine residents. Offered 12-month Experian IdentityWorks monitoring.
Leak gap clock✗ Leak >180d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 227 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_9f371d439a18287eLeak Sitebianlianfiled 2025-02-13(188d gap)Verified
- bd_3f3ca4b9593482ddLeak Sitebianlianfiled 2025-01-06(227d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e1ef4717-50eb-4b3c-9a87-76ba7d955551.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 21, 2025
- Raw hash
- 78401cb428a7a131b74f74c2ccea44fdb99555d3e019062dbf987a3a40cc5227
Reporting entity
- Name
- Aspire Rural Health Systemnorm: aspire rural health system
- Domain
- aspirerhs.org
- Industry
- Healthcare
Victim entity
- Name
- Aspire Rural Health Systemnorm: aspire rural health system
- Domain
- aspirerhs.org
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jul 18, 2025
- Materiality determined
- —
- Notification sent
- Aug 20, 2025
- Affected individuals
- 4
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 34d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 18, 2025→ Filed with AG: Aug 21, 202534d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.