HackingCustomer Data InvolvedPIIIDENTITY_BASICLowContained

Baim Institute for Clinical Research

bd_03c9b8146adbe98c · schema v1 · pii pii-v1

Full breach record for Baim Institute for Clinical Research →

Baim Institute for Clinical Research notified the New Hampshire Attorney General on July 31, 2024, of a cybersecurity incident detected on June 30, 2024. An unauthorized third party compromised the institute's computer network. The incident involved personal information of New Hampshire residents. The institute engaged forensic investigators and is offering free credit monitoring services to affected individuals.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_4384ebe8a2520763Indiana State AGfiled 2024-07-31Verified
bd_9a6e4048528a1d06Maine State AGfiled 2024-07-31Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/baim-institute-clinical-research-20240731.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2024
Raw hash: a20300553d77abc08f94a4479160d46b08b31decac80f1d375a5c6b62f0f5d8e

Reporting entity

Name: Baim Institute for Clinical Research
norm: baim institute for clinical research

Victim entity

Name: Baim Institute for Clinical Research
norm: baim institute for clinical research

Incident

Discovered: Jun 30, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIDENTITY_BASIC
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: exploit_public_facing

Compliance

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.