HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPHIHealth (basic)Medium

Hospice of Huntington

bd_07f51c5e7ec58129 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 16, 2024

To disclose

—

Affected

1state residents only

Linked

5 filings

Confidence

67%

Full breach record for Hospice of Huntington →2 incidents on file

Hospice of Huntington issued a consumer notification letter dated February 14, 2024, regarding unauthorized access to personal and medical information. The breach likely involved the misuse of valid credentials. Affected data includes names, SSNs, financial account numbers, and PHI. The organization is offering 12 months of complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Feb 16, 2024

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 5 about the same incident.View merged incident

A leak claim by karakurt about this victim predates this filing by 147 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitekarakurtbd_e9a936c8689d9d8a2023-09-22 · +147dVerified by operator

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_1317615f428724fc2024-02-16Verified by operator
Massachusetts State AGbd_7ba51cfa2a13382c2024-02-16Verified by operator
HHS OCRbd_fc571634b271301c2024-02-16Verified

Name: Hospice of Huntington
norm: hospice of huntington
Domain: hospicefoundation.org

Name: Hospice of Huntington
norm: hospice of huntington
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Feb 14, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Offering 12-Month Credit Monitoring
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Massachusetts State AGFeb 16 · first

HHS OCRFeb 16 · first

Montana State AGFeb 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1110.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 16, 2024
Raw hash: 3befc391ba7ea7192ad55c3e1e6d96829d095cc5eb035d8eebef8bda0be41a4a

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityHospice of Huntington

Victim entityHospice of Huntington

IncidentUnauthorized Access

Stated responseOffering 12-Month Credit Monitoring

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov