HackingPIIPHIHEALTH_BASICLowContained
Birch Medical
bd_21643f37fa4a20c4 · schema v1 · pii pii-v1
Full breach record for Birch Medical →Birch Medical notified the Maryland Attorney General on February 27, 2025, regarding a data event in September 2024 involving unauthorized access to a folder containing names and medical information of 51 Maryland residents. While the investigation could not confirm actual unauthorized access, Birch Medical provided notices and identity theft guidance to affected individuals out of an abundance of caution.
Maryland clock✗ MD AG >90d26 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_ec4db6754055750bCalifornia State AGfiled 2025-03-03Verified
- bd_3d885f4429eec6efMontana State AGfiled 2025-02-27(4d gap)Candidate
- bd_50d383c5c1fa63f3Vermont State AGfiled 2025-02-27(4d gap)Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376470.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 3, 2025
- Raw hash
- 192c2f6234306263dd960d94c1f8d70945c9e51bfc881296f09c0ed2b26b5746
Reporting entity
- Name
- Birch Medicalnorm: birch medical
Victim entity
- Name
- Birch Medicalnorm: birch medical
Incident
- Discovered
- Sep 1, 2024
- Materiality determined
- —
- Notification sent
- Feb 27, 2025
- Affected individuals
- 51
- Data types
- PIIPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maryland Attorney GeneralNotified relevant state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 26 weeks(183 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.