Clustered 7 filings across 6 jurisdictions · filed Feb 3, 2025. View entity profile → Other incidents for this victim →
incident inc_f5b614aae8b14fb4 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
CA DE ME MT NH VT
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Jul 27, 2024
When the intrusion reportedly occurred, per the linked filings
Jul 31, 2024
Reported by MAINE AG, DELAWARE AG, NEW HAMPSHIRE AG, CALIFORNIA AG, VERMONT AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Bayhealth Medical Center reported a data breach to the Montana Attorney General. The breach was reported on 2025-02-03. The breach occurred from 07/27/2024 to 07/31/2024. 61 Montana residents were affected.
Affected (this filing): 61
Bayhealth Medical Center, a healthcare organization, reported a data breach affecting 257 Maine residents. The breach, described as an external system breach (hacking), occurred on July 27, 2024, and was discovered on July 31, 2024. Affected individuals were notified on February 3, 2025, and offered 12 months of credit monitoring services from IDX.
Affected (this filing): 257
Bayhealth Medical Center notified Delaware AG of a cybersecurity incident occurring July 27-31, 2024, involving unauthorized access to network systems. The breach compromised Protected Health Information (PHI) and personally identifiable information (PII), including names and government identifiers. The company engaged forensic specialists, notified federal law enforcement, and offered 12-24 months of credit monitoring and identity restoration services to affected individuals across multiple jurisdictions.
Bayhealth Medical Center experienced unauthorized access to its network between July 27 and July 31, 2024. The breach exposed Protected Health Information (PHI) and personal data of 185 New Hampshire residents. Bayhealth detected the suspicious activity on July 31, 2024, engaged forensic specialists, notified federal law enforcement, and provided credit monitoring services to affected individuals.
Affected (this filing): 185
Bayhealth Medical Center experienced unauthorized access to its network between July 27 and July 31, 2024. The organization became aware of suspicious activity on July 31, 2024. The incident involved the acquisition of Protected Health Information (PHI) and other personal data. Forensic specialists were engaged, and federal law enforcement was notified. Credit monitoring services are being offered to affected individuals.
Bayhealth Medical Center notified consumers of a cybersecurity incident where unauthorized access occurred between July 27 and July 31, 2024. The breach impacted names and Protected Health Information (PHI). The organization engaged forensic specialists, notified federal law enforcement, and is offering 12-24 months of credit monitoring. The incident status is contained.
Bayhealth Medical Center notified individuals of a data event involving unauthorized network access between July 27 and July 31, 2024. The incident involved the acquisition of names and Protected Health Information (PHI). Federal law enforcement was notified. Bayhealth offered 12-24 months of credit monitoring and identity restoration services. Approximately 159 Rhode Island residents were identified as potentially impacted.
Affected (this filing): 159