GLOBALClaimed by ALPHV / BlackCatFirst sightinglinked via shared-victim match · 100%
Posted to leak site Sep 29, 2023bd_c4b2c0198b70501e
/
Clustered 7 filings across 6 jurisdictions · filing window Sep 29, 2023 → Nov 9, 2023. View entity profile → Other incidents for this victim →
incident inc_b7018b13f1b9427d · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Gap between first leak claim and first regulatory filing
Time between earliest and latest filing
Not recorded for this incident
Materiality delta · SEC filing delay — no SEC 8-K in this cluster.
CA ID ME MI MT
Leak Site · HHS OCR · State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Jul 28, 2023 → Aug 23, 2023
When the intrusion reportedly occurred, per the linked filings
Aug 22, 2023
Reported by IDAHO AG, CALIFORNIA AG filings
/
DESCRIPTION
Oct 10, 2023
Reported by MAINE AG filing
McLaren Health Care reported to HHS on 2023-10-20 a Hacking/IT Incident affecting 2,103,881 individuals. Breached information located on Network Server. The cyber-attack compromised PHI including names, addresses, birthdates, SSNs, claims, and treatment information. The entity notified HHS, affected individuals, and the media, and implemented additional administrative and technical safeguards.
Affected (this filing): 2,103,881
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
McLaren Health Care experienced unauthorized access to its network between July 28, 2023, and August 23, 2023. The organization became aware of suspicious activity on August 22, 2023. The breach potentially impacted patient information including names, Social Security numbers, health insurance details, dates of birth, and medical records such as diagnoses and treatment information. McLaren engaged third-party forensic specialists, secured its network, and is implementing additional administrative and technical safeguards. Identity theft protection services are being offered to affected individuals.
McLaren Health Care reported a data breach to the Montana Attorney General. The breach was reported on 2023-11-09. The breach occurred from 7/28/2023 to 8/23/2023. 137 Montana residents were affected.
Affected (this filing): 137
McLaren Health Care reported a data breach affecting 77 Maine residents after an external system breach (hacking) that occurred between July 28, 2023, and August 23, 2023. The breach was discovered on October 10, 2023, and involved the compromise of Social Security numbers. The company began notifying affected individuals on November 9, 2023, and offered 12 months of credit monitoring services.
Affected (this filing): 77
McLaren Health Care notified the Idaho Attorney General on November 9, 2023, of unauthorized network access occurring between July 28 and August 23, 2023. The incident potentially affected 107 Idaho residents, exposing names, Social Security numbers, and health information. McLaren engaged forensic specialists, notified law enforcement, and provided 12 months of credit monitoring to affected individuals.
Affected (this filing): 107