Maine State AG
Clustered 6 filings across 6 jurisdictions · filing window Feb 19, 2024 → Feb 20, 2024. View entity profile → Other incidents for this victim →
incident inc_7337bf40155a443e · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
PII · Government ID
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA DE ME NH OR VT
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
May 28, 2023
When the intrusion reportedly occurred, per the linked filings
May 31, 2023
Reported by DELAWARE AG filing
Jun 13, 2023
Reported by MAINE AG, OREGON AG, VERMONT AG, CALIFORNIA AG, NEW HAMPSHIRE AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
The Colorado Department of Health Care Policy & Financing reported a data breach affecting 933 Maine residents whose personal information, including names and Social Security numbers, was compromised. The breach occurred on May 28, 2023, and was discovered on June 13, 2023. The organization offered two years of credit monitoring services through Experian to those affected.
Affected (this filing): 933
Colorado Department of Health Care Policy & Financing reported a data breach to the Oregon Attorney General. The breach was reported on 2024-02-19. The breach occurred during 5/28/2023 - 5/31/2023. The breach was discovered on 6/13/2023. 4,662,668 individuals were affected. Notice was sent on 2/19/2024.
Affected (this filing): 4,662,668
Colorado Department of Health Care Policy & Financing (HCPF) notified consumers of a data breach involving its third-party vendor IBM's use of Progress Software's MOVEit Transfer application. Unauthorized access occurred on or about May 28, 2023, affecting files containing Health First Colorado and CHP+ applicant data, including names, SSNs, and insurance identifiers. HCPF offered two years of credit monitoring via Experian.
Colorado Department of Health Care Policy & Financing (HCPF) issued a supplemental data breach notice regarding a third-party supply chain incident involving IBM and Progress Software's MOVEit Transfer application. Unauthorized access occurred on or about May 28, 2023, affecting files containing names, Social Security numbers, and insurance policy identifiers for Health First Colorado and CHP+ members. HCPF offered two years of credit monitoring via Experian. The filing was submitted to the Delaware Attorney General in February 2024.
Colorado Department of Health Care Policy & Financing (HCPF) notified residents of a data breach involving Health First Colorado and CHP+ members. An unauthorized actor accessed files on IBM's MOVEit Transfer application (used by HCPF vendor IBM) between May 28-31, 2023. HCPF discovered the access on June 13, 2023. Affected data includes names, SSNs, Medicaid/Medicare IDs, DOB, addresses, and clinical/medical information. HCPF offered 2 years of credit monitoring via Experian. This is a supplemental notice.
Supplemental notice from Colorado HCPF regarding a third-party supply chain breach involving IBM's MOVEit Transfer application. Unauthorized access occurred on or about May 28, 2023, affecting PHI and PII of Health First Colorado and CHP+ members. Discovery was confirmed on June 13, 2023. Notices sent to NH residents began August 11, 2023.
Affected (this filing): 410