HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Frax Outsourcing
bd_fcffb72a847f709e · schema v1 · pii pii-v1
Full breach record for Frax Outsourcing →Frax Outsourcing, a subsidiary of TheKey, LLC, a healthcare organization, reported a data breach affecting 12,005 individuals, including one resident of Maine. The breach, described as an external system hack, occurred between November 2, 2022, and November 15, 2022, and was discovered on June 19, 2023. The compromised information includes names and Social Security numbers. Affected individuals were notified on September 23, 2023, and offered 12 months of identity theft protection and credit monitoring services through IDX.
Maine clockDiscovered Jun 19, 2023 → Filed with AG Sep 22, 202395d ✗ ME AG >90d14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_313083397f767c1eOregon State AGfiled 2023-10-10(18d gap)Verified
- bd_8967bd1d3f3e8299California State AGfiled 2023-10-10(18d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a2fd5a72-4639-4b90-b4ad-3e96581544bd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 22, 2023
- Raw hash
- 7b920e5746a08865520babf411cf454bfff0467df142a60ff7514ce52d4224fe
Reporting entity
- Name
- Frax Outsourcingnorm: frax outsourcing
Victim entity
- Name
- Frax Outsourcingnorm: frax outsourcing
Incident
- Discovered
- Jun 19, 2023
- Materiality determined
- —
- Notification sent
- Sep 23, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 14 weeks(95 days from discovery to filing)
- Compliance flags
- ME AG >90d · 95dME resident >60d · 96d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 19, 2023→ Filed with AG: Sep 22, 202395d 90 days ME AG >90d Maine Discovered: Jun 19, 2023→ Notified: Sep 23, 202396d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.