DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Harrisburg Medical Center

bd_0dd463b5d8d883d6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 23, 2022

Filed

Dec 12, 2023

To disclose

51 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

65%
Full breach record for Harrisburg Medical Center →6 incidents on file

Harrisburg Medical Center notified consumers of a data breach where an unknown third party accessed systems from Dec 19-23, 2022. Affected data included names, SSNs, DOBs, clinical info, and for some, driver's license and financial account numbers. HMC engaged forensic investigators and law enforcement, enhanced security measures, and offered one year of Equifax credit monitoring.

Vermont clock✗ VT AG >45 bday51 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 4 days
discovery → filing · 51 weeks / 354 days

Dec 19, 2022

Begins

Dec 23, 2022

Discovered

Dec 12, 2023

Filed

vs. sector median

+38 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Massachusetts State AGDec 12 · first
New Hampshire State AGDec 12 · first
Montana State AGDec 12 · first
Maine State AGDec 12 · first
Vermont State AGDec 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.