HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPHIHealth (basic)Medium

Hospice of Huntington

bd_07f51c5e7ec58129 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 16, 2024

To disclose

—

Affected

1state residents only

Linked

6 records

Confidence

67%

Full breach record for Hospice of Huntington →

Hospice of Huntington issued a consumer notification letter dated February 14, 2024, regarding unauthorized access to personal and medical information. The breach likely involved the misuse of valid credentials. Affected data includes names, SSNs, financial account numbers, and PHI. The organization is offering 12 months of complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Feb 16, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 6 records about the same incident.View merged incident

A leak claim by karakurt about this victim was first seen 147 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitekarakurtbd_e9a936c8689d9d8a2023-09-22 · +147dVerified by operator

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_1317615f428724fc2024-02-16Verified by operator
Massachusetts State AGbd_7ba51cfa2a13382c2024-02-16Verified by operator
HHS OCRbd_fc571634b271301c2024-02-16Verified
Illinois State AGbd_d37d2aa9ef5cb9d52024-02-01 · +15dVerified by operator

Name: Hospice of Huntington
norm: hospice of huntington
Domain: hospicefoundation.org

Name: Hospice of Huntington
norm: hospice of huntington
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Feb 14, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Offering 12-Month Credit Monitoring
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Illinois State AGFeb 1 · first

Massachusetts State AG+15d

HHS OCR+15d

Montana State AG+15d · this page

Pattern: first filing Feb 1 (IL), last Feb 16 (MT) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1110.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 16, 2024
Raw hash: 3befc391ba7ea7192ad55c3e1e6d96829d095cc5eb035d8eebef8bda0be41a4a

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityHospice of Huntington

Victim entityHospice of Huntington

IncidentUnauthorized Access

Stated responseOffering 12-Month Credit Monitoring

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov