HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
Memorial Hospital and Manor
bd_2018af7fe358a2b7 · schema v1 · pii pii-v1
Full breach record for Memorial Hospital and Manor →Memorial Hospital and Manor notified the Maryland AG of a data security incident discovered on Nov 2, 2024. Unauthorized access by an unknown actor exposed personal and health information of ~42 Maryland residents, including names, SSNs, DOBs, and medical history. The hospital engaged forensic investigators, secured its network, and mailed notifications offering 12 months of identity protection services.
Maryland clock✗ MD AG >90d14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
A leak claim by embargo about this victim predates this filing by 98 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (3)
- bd_32a0d8986b91d8aeLeak Siteembargofiled 2024-11-04(95d gap)Verified
- bd_35ab4b9ad0073895Leak Siteembargofiled 2024-11-02(98d gap)Verified by operator
- bd_d6ff5060fcc59c17Leak Siteembargofiled 2024-11-02(98d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_5406be6911868410Montana State AGfiled 2025-02-08Verified
- bd_58a3f32af1a0cfa1HHS OCRfiled 2025-02-08Candidate
- bd_c9845879829315b0Maine State AGfiled 2025-02-08Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376342.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 8, 2025
- Raw hash
- 9f0d730714f0465ef78fd820ac92810707883d52faa55a7be2cd11b2cbcde8bd
Reporting entity
- Name
- Memorial Hospital and Manornorm: memorial hospital and manor
- Domain
- mh-m.org
Victim entity
- Name
- Memorial Hospital and Manornorm: memorial hospital and manor
- Domain
- mh-m.org
Incident
- Discovered
- Nov 2, 2024
- Materiality determined
- —
- Notification sent
- Feb 7, 2025
- Affected individuals
- 42
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maryland Attorney General
Compliance
- Time to disclose
- 14 weeks(98 days from discovery to filing)
- Compliance flags
- MD AG >90dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.