HackingCustomer Data InvolvedIDENTITY_GOVERNMENTMediumResolved
CCM Health
bd_f1a609c3ddaed8a3 · schema v1 · pii pii-v1
Full breach record for CCM Health →CCM Health, a healthcare organization, reported an external system breach that occurred from April 3, 2023, to April 10, 2023. The breach was discovered on February 12, 2024, and affected 4 Maine residents. The compromised data included names and Social Security numbers. The company offered 12 months of credit monitoring and identity restoration services through Cyberscout.
Maine clockDiscovered Feb 12, 2024 → Filed with AG Mar 13, 202430d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_1f76fbcbf7e394d9Washington State AGfiled 2024-03-12(1d gap)Candidate
- bd_9cd9daff80fca156California State AGfiled 2024-03-12(1d gap)Verified
- bd_c67b7a97167e034dHHS OCRfiled 2024-03-12(1d gap)Verified
- bd_f35303503d1c70e3Montana State AGfiled 2024-03-12(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 23d gap
- bd_27ad049c600e5e1cCalifornia State AGfiled 2024-04-05(23d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4843dfb0-9977-43dd-8c38-9786292f04de.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 13, 2024
- Raw hash
- ef5fd32aaa6fdf66241d2015ab1f765626c97e1ac5c66111c23727e43dd6ba88
Reporting entity
- Name
- CCM Healthnorm: ccm health
- Domain
- ccmhealthmn.com
Victim entity
- Name
- CCM Healthnorm: ccm health
- Domain
- ccmhealthmn.com
Incident
- Discovered
- Feb 12, 2024
- Materiality determined
- —
- Notification sent
- Mar 12, 2024
- Affected individuals
- 4
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 12, 2024→ Filed with AG: Mar 13, 202430d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.