Bloom Health Centers

On September 11, 2023, the Maine Attorney General's Office disclosed a data breach at Bloom Health Centers, which occurred on June 23, 2023. The incident exposed the personal information of 1,654 individuals, including at least one Maine resident. While Bloom Health Centers confirmed there is no evidence of misuse of the compromised data, the breach raises concerns over the security of sensitive patient records. The company has responded by implementing enhanced security measures, though the exact nature of the breach (e.g., phishing, system vulnerability, or external attack) was not specified. The exposed data likely included personally identifiable information (PII), which, if exploited, could lead to identity theft, fraud, or reputational harm for affected individuals. The breach underscores vulnerabilities in healthcare data protection, particularly in smaller or regional health providers where cybersecurity defenses may be less robust. No ransomware involvement was reported, and the breach appears confined to customer/patient data leakage without broader systemic disruption.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/19d76ad4-5e43-406c-8508-c887fea9727e.shtml

TPRM report: https://www.rankiteo.com/company/bloomhealthcenters

"id": "blo932082025",
"linkid": "bloomhealthcenters",
"type": "Breach",
"date": "6/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1,654 individuals (including 1 '
                                              'Maine resident)',
                        'industry': 'Healthcare',
                        'name': 'Bloom Health Centers',
                        'type': 'Healthcare Provider'}],
 'data_breach': {'number_of_records_exposed': '1,654',
                 'personally_identifiable_information': True,
                 'type_of_data_compromised': 'Personal information'},
 'date_detected': '2023-06-23',
 'date_publicly_disclosed': '2023-09-11',
 'description': "The Maine Attorney General's Office reported a data breach "
                'incident involving Bloom Health Centers on September 11, '
                '2023. The breach, which occurred on June 23, 2023, '
                'potentially affected the personal information of 1,654 '
                'individuals, including one Maine resident. Bloom Health '
                'Centers has stated that no evidence suggests misuse of the '
                'affected information and is offering increased security '
                'measures.',
 'impact': {'data_compromised': 'Personal information of 1,654 individuals',
            'identity_theft_risk': 'Potential (no evidence of misuse '
                                   'reported)'},
 'investigation_status': 'Ongoing (no evidence of misuse reported)',
 'post_incident_analysis': {'corrective_actions': 'Increased security '
                                                  'measures'},
 'references': [{'date_accessed': '2023-09-11',
                 'source': "Maine Attorney General's Office"}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Attorney '
                                                       "General's Office"},
 'response': {'remediation_measures': 'Increased security measures'},
 'title': 'Data Breach at Bloom Health Centers',
 'type': 'Data Breach'}