HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Baywood Medical Associates, PLC
bd_fb8c02e947735545 · schema v1 · pii pii-v1
Full breach record for Baywood Medical Associates, PLC →Baywood Medical Associates, PLC (dba Desert Pain Institute) reported an external system breach (hacking) occurring on July 3, 2021, discovered on September 13, 2021. The incident compromised the personal information of 45,262 individuals, including names and driver's license numbers. The organization notified affected individuals in writing on November 3, 2021, and provided 12 months of credit monitoring and identity theft restoration services.
Maine clockDiscovered Sep 13, 2021 → Filed with AG Nov 3, 202151d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_31281024e8e188e6Montana State AGfiled 2021-11-03Verified
- bd_32ed13c9941a7c5fMontana State AGfiled 2021-11-03Verified
- bd_402e18fb60800b81HHS OCRfiled 2021-11-03Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/12f478d1-ef78-499b-a7fd-010d208239e4.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 3, 2021
- Raw hash
- b324f3e0734c1f5dc01b5a43bf25f560ed2b4584ce55e66c9a3b74926a57c37c
Reporting entity
- Name
- Baywood Medical Associates, PLCnorm: baywood medical associates
Victim entity
- Name
- Baywood Medical Associates, PLCnorm: baywood medical associates
Incident
- Discovered
- Sep 13, 2021
- Materiality determined
- —
- Notification sent
- Nov 3, 2021
- Affected individuals
- 45,262
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- ME AG >30d · 51d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 13, 2021→ Filed with AG: Nov 3, 202151d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.