CCM Health
ent_a20421bf101e80d4ba90b86a
Disclosures
9
State AG · HHS OCR · 6 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
85,258
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- CCM Health
- Normalized
- ccm health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- ccmhealthmn.com
Disclosure history (9)newest first
- 🐻California State AGas victim2024-07-18
CCM Health notified the California Attorney General of a data breach occurring between April 3 and April 10, 2023. The incident involved the unauthorized access of personal and health information, including names, addresses, Social Security numbers, and health insurance details. Affected residents in California and several other states were offered 12 months of complimentary credit monitoring and fraud assistance. CCM Health stated it has reviewed and revised its security practices and implemented additional measures. No specific attack vector or threat actor was identified in the disclosure.
- 🦞Maine State AGas victim2024-07-18
CCM Health, a healthcare organization, reported a data breach to the Maine Attorney General. The breach, which occurred between April 3, 2023, and April 10, 2023, was discovered on February 12, 2024. The incident was described as an external system breach (hacking) and affected 5 Maine residents. In response, CCM Health offered 12 months of credit monitoring and identity restoration services through Cyberscout via TransUnion.
- 🐻California State AGas victim2024-04-05
CCM Health notified California residents of a network security incident where unauthorized access occurred between April 3 and April 10, 2023. The attacker may have accessed and removed files containing personal information (name, date of birth) and protected health information (medical records, diagnoses, treatments). CCM Health contained the threat, engaged forensic investigators, and alerted law enforcement. No specific malware or threat actor was named.
- 🦞Maine State AGas victim2024-03-13
CCM Health, a healthcare organization, reported an external system breach that occurred from April 3, 2023, to April 10, 2023. The breach was discovered on February 12, 2024, and affected 4 Maine residents. The compromised data included names and Social Security numbers. The company offered 12 months of credit monitoring and identity restoration services through Cyberscout.
- 🌲Washington State AGas victim2024-03-12
CCM Health, a health sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2023-04-10 and filed notice on 2024-03-12. 1,273 Washington residents were affected. 337 days elapsed between awareness and notification. 7 days to identify the breach. 0 days to contain the breach.
- 🏎️Indiana State AGas victim2024-03-12
CCM Health reported a data breach to the Indiana Attorney General. The breach occurred on 2023-04-03 and was reported on 2024-03-12. 2 Indiana residents were affected. 85,258 individuals affected in total.
- 🐻California State AGas victim2024-03-12
CCM Health notified the California Attorney General of a network security incident where an unauthorized party accessed its network between April 3 and April 10, 2023. The organization became aware of the potential unauthorized access on April 3, 2023. A forensic investigation concluded that files containing personal and health information, including Social Security Numbers, were accessed and removed. CCM Health contained the threat, engaged third-party cybersecurity professionals, and alerted law enforcement. Affected individuals are offered 12 months of complimentary credit monitoring.
- FEDERALHHS OCRas victim2024-03-12
CCM Health reported to HHS on 2024-03-12 a Hacking/IT Incident affecting 84329 individuals. Breached information located on Network Server.
- 🦬Montana State AGas victim2024-03-12
CCM Health reported a data breach to the Montana Attorney General. The breach was reported on 2024-03-12. The breach occurred from 4/3/2023 to 4/10/2023. 34 Montana residents were affected.