HackingCustomer Data InvolvedPIIIDENTITY_BASICMediumContained
Waveny Lifecare Network, Inc.
bd_fe25b9b03397dbbe · schema v1 · pii pii-v1
Full breach record for Waveny Lifecare Network, Inc. →Waveny Lifecare Network, a healthcare entity based in New Canaan, CT, reported an external system breach (hacking) occurring on May 24, 2025, discovered on March 24, 2026. The incident affected 8,548 individuals, including 19 Maine residents. Notification was sent on June 2, 2026, offering 12 months of credit monitoring via TransUnion. The breach involved unauthorized access to external systems.
Maine clockDiscovered Mar 24, 2026 → Filed with AG Jun 2, 202670d ⏱ ME AG >30d10 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_0bcd7a9efd634e74Indiana State AGfiled 2026-06-02Verified
- bd_c6dfaf2c555e0c6fHHS OCRfiled 2026-06-02Verified
- bd_f62f87e4b8b09b42New Hampshire State AGfiled 2026-06-02Verified
- bd_c62adfed97e2fe4dVermont State AGfiled 2026-06-03(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_895e51f6eb480db1Massachusetts State AGfiled 2026-06-01(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/44f23a9f-0c63-4b19-a98b-f83e7491e0aa.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 2, 2026
- Raw hash
- 052b238074225116bd893f53cbce609aa8b8fbf58dba6ac908445c449766f5d5
Reporting entity
- Name
- Ciprianinorm: cipriani
- Domain
- cipriani.com
Victim entity
- Name
- Waveny Lifecare Network, Inc.norm: waveny lifecare network
Incident
- Discovered
- Mar 24, 2026
- Materiality determined
- —
- Notification sent
- Jun 2, 2026
- Affected individuals
- 8,548
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- ME AG >30d · 70dME resident >60d · 70d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 24, 2026→ Filed with AG: Jun 2, 202670d 30 days (soft) ME AG >30d Maine Discovered: Mar 24, 2026→ Notified: Jun 2, 202670d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.