HackingStolen CredentialsData ExfiltratedData PublishedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
BAYLOR COLLEGE OF MEDICINE
bd_11e96b09cbaf6cd3 · schema v1 · pii pii-v1
Full breach record for BAYLOR COLLEGE OF MEDICINE →Baylor College of Medicine notified the New Hampshire Attorney General in November 2017 regarding a data breach discovered in late October 2016. An unauthorized party accessed a database containing applicant information, including names and Social Security numbers. The data was later found on a public website in October 2017. Approximately 1 New Hampshire resident was affected. BCM engaged Kroll to provide one year of credit monitoring services.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c27af95d64141719Montana State AGfiled 2017-11-08Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/baylor-college-20171108.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 8, 2017
- Raw hash
- 50f92942eaaf5aeead515b61e15751411ea6c45e8d418130b797519e15ccc5b0
Reporting entity
- Name
- BAYLOR COLLEGE OF MEDICINEnorm: baylor college of medicine
- Domain
- bcm.edu
Victim entity
- Name
- BAYLOR COLLEGE OF MEDICINEnorm: baylor college of medicine
- Domain
- bcm.edu
Incident
- Discovered
- Oct 1, 2016
- Materiality determined
- —
- Notification sent
- Nov 8, 2017
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Office of the Attorney General of New Hampshire
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(403 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.