HackingHealthcareHealthcareData ExfiltratedPIIPHIIdentity (basic)LowContained

Wyoming County Community Health System

bd_217c042e5aab0243 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 28, 2023

Filed

Nov 16, 2023

To disclose

33 weeks

Affected

1state residents only

Linked

8 records

Confidence

65%

Full breach record for Wyoming County Community Health System →

Wyoming County Community Health System notified Montana residents of a March 28, 2023 unauthorized access to network files. The incident involved names and protected health information. The organization engaged third-party cybersecurity specialists, notified the FBI, and offered identity protection services. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d33 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 33 weeks / 233 days

Mar 28, 2023

Begins

Mar 28, 2023

Discovered

Nov 16, 2023

Filed

vs. sector median

+24 wks slower

This filing is one of 8 records about the same incident.View merged incident

A leak claim by nokoyawa about this victim was first seen 177 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitenokoyawabd_419f068d1e58cd282023-05-12 · +188dVerified by operator

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_27eb370edf1742ce2023-11-16Verified
Massachusetts State AGbd_70e78e4ce643e4212023-11-16Verified by operator
Maine State AGbd_d793d0ba5b25f7d32023-11-16Verified by operator
HHS OCRbd_dee36e47a3e253912023-11-16Verified

Show 1 more filing ↓up to 319d gap

Illinois State AGbd_971599afbe66f7512023-01-01 · +319dVerified by operator

Press reports (1)

Pressnokoyawabd_a1c269d62cbdcf882023-03-28 · +233dCandidate

Name: Wyoming County Community Health System
norm: wyoming county community health system
Domain: wcchs.net

Name: Wyoming County Community Health System
norm: wyoming county community health system
Domain: wcchs.net
Industry: Healthcarellm

Discovered: Mar 28, 2023
Breach occurred: Mar 28, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 16, 2023
Affected individuals: 1state-resident count only
Data types: PIIPHIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Initiated an investigation of the matter with the assistance of third-party cybersecurity specialists
Notified the Federal Bureau of Investigation
Offering complimentary identity protection services through IDX, A ZeroFox Company
Changes made: Implemented additional measures to enhance network security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(233 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Illinois State AGJan 1 · first

New Hampshire State AG+319d

Massachusetts State AG+319d

Maine State AG+319d

HHS OCR+319d

Montana State AG+319d · this page

Pattern: first filing Jan 1 (IL), last Nov 16 (MT) — a 319-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-853.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 16, 2023
Raw hash: 2331ba19fc41b779265575438ebeb73c50c336005dd9395010947d53ed2cb313

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Press reports (1)

Reporting entityWyoming County Community Health System

Victim entityWyoming County Community Health System

Incidentdiscovered Mar 28, 2023

Stated responseInitiated an investigation of the matter with the assistance of third-party cybersecurity specialists

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov