HackingStolen CredentialsData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Woodlawn Hospital
bd_0d7266cea615f384 · schema v1 · pii pii-v1
Full breach record for Woodlawn Hospital →Woodlawn Hospital Providers notified consumers of an unauthorized access event where files were copied from its network between June 25 and June 30, 2025. The incident exposed names, DOBs, SSNs, driver's licenses, medical, and health insurance information. The hospital engaged in a full investigation, notified federal law enforcement, and offered credit monitoring services.
Vermont clock✗ VT AG >45 bday23 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-11-woodlawn-hospital-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 11, 2025
- Raw hash
- 99944de727ae38f2409ee869934d6282401789df247af66315eeaba2204ebf07
Reporting entity
- Name
- Woodlawn Hospitalnorm: woodlawn hospital
Victim entity
- Name
- Woodlawn Hospitalnorm: woodlawn hospital
Incident
- Discovered
- Jun 30, 2025
- Materiality determined
- Nov 13, 2025
- Notification sent
- Dec 11, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- notified federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 23 weeks(164 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.