DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedGovernment IDHighResolved

CCM Health

bd_f1a609c3ddaed8a3 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 12, 2024

Filed

Mar 13, 2024

To disclose

4 weeks

Affected · nationwide

29,1824 in this filing

Linked

9 filings

Confidence

50%
Full breach record for CCM Health2 incidents on file

CCM Health, a healthcare organization, reported an external system breach that occurred from April 3, 2023, to April 10, 2023. The breach was discovered on February 12, 2024, and affected 4 Maine residents. The compromised data included names and Social Security numbers. The company offered 12 months of credit monitoring and identity restoration services through Cyberscout.

Maine clockDiscovered Feb 12, 2024Filed with AG Mar 13, 202430d ME AG ≤30d4 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 315 days
discovery → filing · 4 weeks / 30 days

Apr 3, 2023

Begins

Feb 12, 2024

Discovered

Mar 13, 2024

Filed

vs. sector median

8 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filingsup to 23d gap

Filing propagation · 9 filings · 8 states

View merged incident ↗

Pattern: first filing Mar 1 (IL), last Apr 5 (CA) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.