HackingCustomer Data InvolvedIDENTITY_GOVERNMENTHighContained
Highmark Inc
bd_f75581b2eb9ebe57 · schema v1 · pii pii-v1
Full breach record for Highmark Inc →Healthcare organization Highmark reported an external system breach that occurred from December 13 to December 15, 2022. The breach was discovered on December 15, 2022, and affected 2,774 Maine residents, compromising their Social Security Numbers. Highmark offered affected individuals 24 months of complimentary credit monitoring and identity theft restoration services.
Maine clockDiscovered Dec 15, 2022 → Filed with AG Feb 3, 202350d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_e3ddb304e00287caCalifornia State AGfiled 2023-02-03Candidate
- bd_942a588b7d88d2c3Washington State AGfiled 2023-02-06(3d gap)Verified
- bd_b2b69efe74984e65Delaware State AGfiled 2023-02-10(7d gap)Verified
- bd_9b2ceab0938674dbDelaware State AGfiled 2023-02-15(12d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 143d gap
- bd_445a421e449e6ca3New Hampshire State AGfiled 2023-06-26(143d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/67bb2ced-9a70-4248-b728-68a92a56c860.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2023
- Raw hash
- 4b3da2d496738844a71e14271999ce6d00307d5616bb0dc172189b09c4547b2b
Reporting entity
- Name
- Highmark Incnorm: highmark
- Domain
- highmark.com
Victim entity
- Name
- Highmark Incnorm: highmark
- Domain
- highmark.com
Incident
- Discovered
- Dec 15, 2022
- Materiality determined
- —
- Notification sent
- Feb 13, 2023
- Affected individuals
- 2,774
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 7 weeks(50 days from discovery to filing)
- Compliance flags
- ME AG >30d · 50d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 15, 2022→ Filed with AG: Feb 3, 202350d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.