HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Southeast Florida Behavioral Health Network
bd_017c98ade8bc0fa8 · schema v1 · pii pii-v1
Full breach record for Southeast Florida Behavioral Health Network →South Florida Behavioral Health Network (SFBHN) reported an unauthorized access incident affecting individuals in Florida and New Hampshire. The unauthorized actor accessed internal files between August 1-3, 2023. SFBHN detected suspicious activity on August 3, 2023, engaged third-party specialists, notified law enforcement, and began notifying affected individuals in April 2024. Credit monitoring services were offered.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/south-florida-behavioral-health-network-20240529.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 29, 2024
- Raw hash
- a98cb752ce3cdfaf79cb58a22f72a70b875ba81fb41fcc7451e5b373d29d3f7c
Reporting entity
- Name
- Southeast Florida Behavioral Health Networknorm: southeast florida behavioral health network
- Domain
- sefbhn.org
Victim entity
- Name
- Southeast Florida Behavioral Health Networknorm: southeast florida behavioral health network
- Domain
- sefbhn.org
Incident
- Discovered
- Aug 3, 2023
- Materiality determined
- Mar 25, 2024
- Notification sent
- Apr 26, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementProviding written notice to relevant state and federal regulatorsProviding written notice to the three major credit reporting agencies
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 43 weeks(300 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.