MalwareRansomwareData EncryptedRansom DemandedCustomer Data InvolvedIDENTITY_BASICLowContained
Burrell College of Osteopathic Medicine
bd_24220286b2ab739c · schema v1 · pii pii-v1
Full breach record for Burrell College of Osteopathic Medicine →Burrell College of Osteopathic Medicine (BCOM) notified the NH AG of a data event affecting 2 NH residents. BCOM detected suspicious activity disrupting system access on Jan 26, 2024. The incident involved ransomware, encrypting data. Personal information (names) was potentially impacted. BCOM engaged forensic specialists, notified the FBI, and offered credit monitoring services to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d723ef70fb5c1228Indiana State AGfiled 2024-07-11Verified
- bd_e4ff4918db00234dMontana State AGfiled 2024-07-11Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/burrell-college-osteopathic-medicine-20240711.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 11, 2024
- Raw hash
- e71d5f81914bc5287079d7c7dba86a5f382e06b426adbb1091c80f9fa17cdc86
Reporting entity
- Name
- Burrell College of Osteopathic Medicinenorm: burrell college of osteopathic medicine
Victim entity
- Name
- Burrell College of Osteopathic Medicinenorm: burrell college of osteopathic medicine
Incident
- Discovered
- Jan 26, 2024
- Materiality determined
- May 31, 2024
- Notification sent
- Jul 11, 2024
- Affected individuals
- 2
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Federal Bureau of InvestigationProvided written notice to relevant state and federal regulatorsProvided written notice to the three major credit reporting agencies
Compliance
- Time to disclose
- 24 weeks(167 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.