HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

The Bronx Veterans Medical Research Foundation, Inc.

bd_226eebe2bea1433a · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 1, 2022

To disclose

—

Affected

Not disclosed

Confidence

65%

Full breach record for The Bronx Veterans Medical Research Foundation, Inc. →

Veterans Medical Research Foundation reported unauthorized access to an employee's email account between September 13, 2021, and December 2, 2021. The organization engaged a cybersecurity firm to investigate and secured the compromised account. A review of emails and attachments determined that personal information, including names, was accessed. The organization implemented enhanced security protocols and offered one year of complimentary identity monitoring services through Kroll to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 13, 2021

Begins

Apr 1, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: The Bronx Veterans Medical Research Foundation, Inc.
norm: the bronx veterans medical research
Domain: bvmrf.org

Name: The Bronx Veterans Medical Research Foundation, Inc.
norm: the bronx veterans medical research
Domain: bvmrf.org
Industry: Healthcarellm

Discovered: —
Breach occurred: Sep 13, 2021 – Dec 2, 2021
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Took steps to secure the email account
Began an investigation with the assistance of a cybersecurity firm
Conducted a review of the emails and attachments in the mailboxes to identify any personal information that may have been accessed
Offering a complimentary one-year membership to Kroll’s identity monitoring services
Changes made: Implemented additional measures to enhance our existing security protocols
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-552277
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2022
Raw hash: be84948243430034a1cbc5a2ecd8bd8912d0410063ab55e9ea5c02182152c601

Reporting entityThe Bronx Veterans Medical Research Foundation, Inc.

Victim entityThe Bronx Veterans Medical Research Foundation, Inc.

IncidentUnauthorized Access

Stated responseTook steps to secure the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov