HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIFINANCIALPHIIDENTITY_GOVERNMENTMediumResolved
St. Andrew's Resources for Seniors System
bd_fbcfd72a1ec6a335 · schema v1 · pii pii-v1
Full breach record for St. Andrew's Resources for Seniors System →Unauthorized actor accessed employee email accounts at St. Andrew's Resources for Seniors System (St. Louis, MO healthcare org) around Dec 13, 2023. Discovered Jan 6, 2025. Data at risk: names, SSNs, financial account info, driver's license, medical and health insurance info. 2 of 16,869 total affected individuals are Maine residents. Notifications sent Feb 7, 2025. CyberScout credit monitoring offered for 12 months.
Maine clockDiscovered Jan 6, 2025 → Filed with AG Feb 7, 202532d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_0d1f90635147cec4Montana State AGfiled 2025-02-07Candidate
- bd_6d5d589606fe7c79Maryland State AGfiled 2025-02-07Verified
- bd_6e405b804d6ffeb3HHS OCRfiled 2025-02-07Verified
- bd_70d01264a0919451Indiana State AGfiled 2025-02-07Verified
Show 1 more filing ↓Show fewer ↑
- bd_732dd450e270af9bOregon State AGfiled 2025-02-07Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c630583a-fb0f-4700-b1fa-72747977aa30.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 7, 2025
- Raw hash
- de96d04401628c880b953bd63242f648327fa5f891cfb896b7085a8dd4a76130
Reporting entity
- Name
- St. Andrew's Resources for Seniors Systemnorm: st andrew s resources for seniors system
- Domain
- standrews1.com
- Industry
- Healthcare
Victim entity
- Name
- St. Andrew's Resources for Seniors Systemnorm: st andrew s resources for seniors system
- Domain
- standrews1.com
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jan 6, 2025
- Materiality determined
- Jan 6, 2025
- Notification sent
- Feb 7, 2025
- Affected individuals
- 2
- Data types
- PIIFINANCIALPHIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Maine AG notifiedlaw enforcement notifiedthree major credit reporting agencies notified
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 6, 2025→ Filed with AG: Feb 7, 202532d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.