CCM Health
ent_a20421bf101e80d4ba90b86a
Disclosures
12
State AG · HHS OCR · 9 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
85,258
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- CCM Health
- Normalized
- ccm health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- ccmhealthmn.com
Disclosure history (12)newest first
- New Hampshire State AGas victim2024-07-22
CCM Health filed a supplemental notification with the New Hampshire Attorney General regarding a cybersecurity incident. Unauthorized access occurred between April 3-10, 2023. The breach affected personal and protected health information of 20 New Hampshire residents. CCM Health contained the threat, engaged forensic investigators, and offered credit monitoring services.
- California State AGas victim2024-07-18
CCM Health notified the California Attorney General of a data breach occurring between April 3 and April 10, 2023. The incident involved the unauthorized access of personal and health information, including names, addresses, Social Security numbers, and health insurance details. Affected residents in California and several other states were offered 12 months of complimentary credit monitoring and fraud assistance. CCM Health stated it has reviewed and revised its security practices and implemented additional measures. No specific attack vector or threat actor was identified in the disclosure.
- Maine State AGas victim2024-07-18
CCM Health, a healthcare provider, reported an external system breach (hacking) occurring between April 3 and April 10, 2023. The incident was discovered on February 12, 2024, affecting 85,258 individuals nationwide, including 5 Maine residents. Compromised data included names, government identifiers, and financial account numbers. CCM Health notified affected individuals between March 12 and June 6, 2024, and offered 12 months of credit monitoring.
- California State AGas victim2024-04-05
CCM Health notified California residents of a network security incident where unauthorized access occurred between April 3 and April 10, 2023. The attacker may have accessed and removed files containing personal information (name, date of birth) and protected health information (medical records, diagnoses, treatments). CCM Health contained the threat, engaged forensic investigators, and alerted law enforcement. No specific malware or threat actor was named.
- Massachusetts State AGas victim2024-03-15
CCM Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-03-15. 105 Massachusetts residents were affected.
- Maine State AGas victim2024-03-13
CCM Health, a healthcare organization, reported an external system breach that occurred from April 3, 2023, to April 10, 2023. The breach was discovered on February 12, 2024, and affected 4 Maine residents. The compromised data included names and Social Security numbers. The company offered 12 months of credit monitoring and identity restoration services through Cyberscout.
- Washington State AGas victim2024-03-12
CCM Health, a healthcare provider, reported a cybersecurity incident where unauthorized access occurred between April 3 and April 10, 2023. The breach exposed personal and protected health information, including names, SSNs, DOBs, and medical records, affecting 1,273 Washington residents. CCM Health contained the threat, engaged forensic investigators, notified law enforcement, and offered credit monitoring to affected individuals.
- Indiana State AGas victim2024-03-12
CCM Health reported a data breach to the Indiana Attorney General. The breach occurred on 2023-04-03 and was reported on 2024-03-12. 2 Indiana residents were affected. 85,258 individuals affected in total.
- California State AGas victim2024-03-12
CCM Health notified the California Attorney General of a network security incident where an unauthorized party accessed its network between April 3 and April 10, 2023. The organization became aware of the potential unauthorized access on April 3, 2023. A forensic investigation concluded that files containing personal and health information, including Social Security Numbers, were accessed and removed. CCM Health contained the threat, engaged third-party cybersecurity professionals, and alerted law enforcement. Affected individuals are offered 12 months of complimentary credit monitoring.
- MINNESOTAHHS OCRas victim2024-03-12
CCM Health reported to HHS on 2024-03-12 a Hacking/IT Incident affecting 84329 individuals. Breached information located on Network Server.
- Montana State AGas victim2024-03-12
CCM Health notified individuals of a network security incident where unauthorized access occurred between April 3-10, 2023. The breach potentially exposed personal and health information, including names, DOBs, SSNs, and medical records. CCM Health contained the network, engaged forensic investigators, and alerted law enforcement. Notices were sent on March 12, 2024, offering 12 months of credit monitoring.
- Illinois State AGas victim2024-03-01
CCM HEALTH filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-050). The register records the breach as discovered on April 3, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.