HackingHealthcareHealthcareCustomer Data InvolvedPIIIdentity (basic)LowContained

Baim Institute for Clinical Research

bd_03c9b8146adbe98c · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 30, 2024

Filed

Jul 31, 2024

To disclose

4 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

67%

Full breach record for Baim Institute for Clinical Research →

Baim Institute for Clinical Research notified the New Hampshire Attorney General on July 31, 2024, of a cybersecurity incident detected on June 30, 2024. An unauthorized third party compromised the institute's computer network. The incident involved personal information of New Hampshire residents. The institute engaged forensic investigators and is offering free credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d4 weeks discovery → filing

Incident timeline

discovery → filing · 4 weeks / 31 days

Jun 30, 2024

Discovered

Jul 31, 2024

Filed

vs. sector median

8 wks faster

This filing is one of 7 about the same incident.View merged incident

A leak claim by ransomhub about this victim predates this filing by 33 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (3)

Leak Siteransomhubbd_b82ea8213c0255ad2024-07-09 · +21dVerified by operator
Leak Siteransomhubbd_25d123aa4c6b62c12024-06-28 · +33dVerified by operator
Leak Siteransomhubbd_cc60e1fe59641dbf2024-06-28 · +33dVerified by operator

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_4384ebe8a25207632024-07-31Verified
Maine State AGbd_9a6e4048528a1d062024-07-31Candidate
Massachusetts State AGbd_97e0e3c87405016b2024-08-01 · +1dVerified

Name: Baim Institute for Clinical Research
norm: baim institute for clinical research
Domain: baiminstitute.org

Name: Baim Institute for Clinical Research
norm: baim institute for clinical research
Domain: baiminstitute.org
Industry: Healthcarellm

Discovered: Jun 30, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: exploit_public_facing

During the incident: Moved quickly to secure its network environment
Launched a thorough investigation
Performed the investigation with the help of independent IT security and forensic investigators
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance
Changes made: Enhanced its security capabilities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJul 31 · first

Maine State AGJul 31 · first

New Hampshire State AGJul 31 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/baim-institute-clinical-research-20240731.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2024
Raw hash: a20300553d77abc08f94a4479160d46b08b31decac80f1d375a5c6b62f0f5d8e

Linked disclosures

Ransomware claims (3)

Regulatory filings (3) · sorted by filing gap

Reporting entityBaim Institute for Clinical Research

Victim entityBaim Institute for Clinical Research

Incidentdiscovered Jun 30, 2024

Stated responseMoved quickly to secure its network environment

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov