HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICHighContained
MailMyPrescriptions.com Pharmacy Corporation
bd_f8c3020ea10ad6f3 · schema v1 · pii pii-v1
Full breach record for MailMyPrescriptions.com Pharmacy Corporation →MailMyPrescriptions.com Pharmacy Corporation reported an external system breach (hacking) occurring between February 3, 2020, and November 24, 2020, discovered on February 17, 2021. The incident affected 24,037 Maine residents, involving the exfiltration of names, government identifiers, and health information. The company notified affected individuals in writing on April 8, 2021, and provided one year of credit monitoring and identity theft protection via Equifax.
Maine clockDiscovered Feb 17, 2021 → Filed with AG Apr 8, 202150d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_38e289bf26b500e1California State AGfiled 2021-04-08Verified
- bd_cdc185ff443b6a8fMontana State AGfiled 2021-04-08Verified
- bd_f739db5fa25c78e5Oregon State AGfiled 2021-04-08Verified
- bd_235fa3124b736c77HHS OCRfiled 2021-04-16(8d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1a431183-377b-40e4-b260-8dbb4621b6cf.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 8, 2021
- Raw hash
- 1e7664994ea2204ff24326f81462b9ade1f8f2cf0a4ced7fe37f295b6c1d5ee2
Reporting entity
- Name
- MailMyPrescriptions.com Pharmacy Corporationnorm: mailmyprescriptionscom pharmacy
- Domain
- mailmyprescriptions.com
Victim entity
- Name
- MailMyPrescriptions.com Pharmacy Corporationnorm: mailmyprescriptionscom pharmacy
- Domain
- mailmyprescriptions.com
Incident
- Discovered
- Feb 17, 2021
- Materiality determined
- —
- Notification sent
- Apr 8, 2021
- Affected individuals
- 24,037
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(50 days from discovery to filing)
- Compliance flags
- ME AG >30d · 50d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 17, 2021→ Filed with AG: Apr 8, 202150d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.