MisuseHealthcareHealthcarePrivilege AbuseCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_CREDENTIALSFINANCIAL_ACCOUNTMediumContained
OCAT, LLC
bd_f8d9d69d85d09b9c · schema v1 · pii pii-v1
Full breach record for OCAT, LLC →OCAT LLC dba Evoke Wellness at Hilliard (medical health provider, OH) experienced an insider wrongdoing incident on 07/17/2024, discovered 08/07/2025. Patient data including names, addresses, DOB, SSNs, driver's licenses, and credit card info may have been accessed without authorization. 261 total affected; 1 Maine resident. Notifications mailed 02/27/2026. Cyberscout credit monitoring (12 months) offered.
Maine clockDiscovered Aug 7, 2025 → Filed with AG Feb 27, 2026204d ✗ ME AG >90d29 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a0db03068b67a3d8New Hampshire State AGfiled 2026-02-27Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aefa3980-bae6-46c1-8927-7627fd91c953.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2026
- Raw hash
- 5b6dac849e654c269a4d168c12ea724d3cdd83a7b2f4f4118716c28de903ddec
Reporting entity
- Name
- Evoke Wellness at Hilliardnorm: evoke wellness at hilliard
- Industry
- Healthcare
Victim entity
- Name
- OCAT, LLCnorm: ocat
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Aug 7, 2025
- Materiality determined
- Feb 20, 2026
- Notification sent
- Feb 27, 2026
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_CREDENTIALSFINANCIAL_ACCOUNT
- Attack vector
- Insider
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 29 weeks(204 days from discovery to filing)
- Compliance flags
- ME AG >90d · 204dME resident >180d · 204d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 7, 2025→ Filed with AG: Feb 27, 2026204d 90 days ME AG >90d Maine Discovered: Aug 7, 2025→ Notified: Feb 27, 2026204d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.