Clustered 7 filings across 4 jurisdictions · filing window Nov 10, 2023 → Sep 10, 2024. View entity profile → Other incidents for this victim →
incident inc_9d4ecf0996a14497 · merge_method human · confidence 100%
Discovered → first regulatory filing
Gap between first leak claim and first regulatory filing
Time between earliest and latest filing
Not recorded for this incident
Discovery variance · Materiality delta · SEC filing delay — no SEC 8-K in this cluster; needs two dated filings.
PII · PHI
ME NH VT
Leak Site · State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Oct 12, 2023 → Oct 30, 2023
When the intrusion reportedly occurred, per the linked filings
We engage our patients on a personal level. Every patient in our communities is a part of our Carespring family. We get to know them-their stories, their families, what the...
Country : United States of America - Exfiltraded data : yes - Encrypted data : no
Jul 16, 2024
Reported by MAINE AG filing
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Carespring Health Care Management notified consumers of a data breach involving unauthorized access to personal information. Affected data included names, addresses, Social Security numbers, and financial account numbers. The company offered 12 months of credit monitoring and identity theft restoration services through Kroll.
Carespring Health Care Management LLC, a healthcare organization in Loveland, OH, reported an external system breach (hacking) that occurred between October 12 and October 30, 2023. The breach was not discovered until July 16, 2024. A total of 76,719 individuals were affected nationwide, with 2 Maine residents affected. Notification was sent electronically on August 15, 2024. Affected individuals were offered 12 months of Kroll Identity Monitoring Services.
Affected (this filing): 2
State AG filing for Carespring Health Care Management LLC in New Hampshire. The attachment content is empty/blank, preventing extraction of breach specifics.
Carespring Health Care Management LLC, a healthcare organization based in Loveland, OH, reported an external system breach (hacking) occurring on October 12, 2024. A total of 76,719 individuals were affected nationally, including 4 Maine residents. Affected individuals were offered 12-month Kroll identity monitoring services. The notice references a prior breach notification dated August 16, 2024. Medical information protection guidance was included, suggesting PHI may have been involved.
Affected (this filing): 4
Carespring Health Care Management notified consumers of a data breach affecting personal information including names and Social Security numbers. The notice, filed with the Vermont Attorney General on September 10, 2024, specifically identifies one impacted Rhode Island resident. Affected individuals were offered 12 months of credit monitoring and identity theft restoration services through Kroll.
Affected (this filing): 1