MalwareRansomwareData ExfiltratedData EncryptedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Horizon Healthcare RCM
bd_00ff9a47dfc272c4 · schema v1 · pii pii-v1
Full breach record for Horizon Healthcare RCM →Horizon Healthcare RCM notified Vermont AG of a ransomware incident occurring Dec 26-27, 2024. Files were encrypted and copied. Data included names and government IDs. Horizon restored systems, had attacker delete data, and offers Kroll identity monitoring. No specific count disclosed.
Vermont clock✗ VT AG >45 bday48 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_24c4025ca3ca22ffMaine State AGfiled 2025-11-26Candidate
- bd_c5493de054e7d752Montana State AGfiled 2025-11-26Candidate
- bd_ef67249e664d4227New Hampshire State AGfiled 2025-11-26Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-11-26-horizon-healthcare-rcm-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 26, 2025
- Raw hash
- c83d215c8904da9f0305ae9036a2afdd3adae552f397536c37bc7a3e8d84735f
Reporting entity
- Name
- Horizon Healthcare RCMnorm: horizon healthcare rcm
Victim entity
- Name
- Horizon Healthcare RCMnorm: horizon healthcare rcm
Incident
- Discovered
- Dec 27, 2024
- Materiality determined
- Nov 26, 2025
- Notification sent
- Nov 26, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Vermont Attorney General
Compliance
- Time to disclose
- 48 weeks(334 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.