HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedPHIPIILowContained

Wyoming County Community Health System

bd_27eb370edf1742ce · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 16, 2023

To disclose

—

Affected

8state residents only

Linked

8 records

Confidence

66%

Full breach record for Wyoming County Community Health System →

Wyoming County Community Health System (WCCHS) notified the NH Attorney General of a data security incident. On March 28, 2023, WCCHS experienced a network disruption and discovered unauthorized access to certain files. An investigation with third-party specialists concluded on November 8, 2023, that personal and protected health information may have been accessed and acquired. Eight New Hampshire residents were affected. WCCHS notified the FBI and is offering complimentary credit and identity protection services. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Mar 28, 2023

Begins

Nov 16, 2023

Filed

This filing is one of 8 records about the same incident.View merged incident

A leak claim by nokoyawa about this victim was first seen 177 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitenokoyawabd_419f068d1e58cd282023-05-12 · +188dVerified by operator

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_217c042e5aab02432023-11-16Verified
Massachusetts State AGbd_70e78e4ce643e4212023-11-16Verified by operator
Maine State AGbd_d793d0ba5b25f7d32023-11-16Verified by operator
HHS OCRbd_dee36e47a3e253912023-11-16Verified

Show 1 more filing ↓up to 319d gap

Illinois State AGbd_971599afbe66f7512023-01-01 · +319dVerified by operator

Press reports (1)

Pressnokoyawabd_a1c269d62cbdcf882023-03-28 · +233dCandidate

Name: Wyoming County Community Health System
norm: wyoming county community health system
Domain: wcchs.net

Name: Wyoming County Community Health System
norm: wyoming county community health system
Domain: wcchs.net
Industry: Healthcarellm

Discovered: —
Breach occurred: Mar 28, 2023
Materiality determined: —
Notification sent: Nov 16, 2023
Affected individuals: 8state-resident count only
Data types: PHIPII
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General John M. Formella, Office of the Attorney General, Consumer Protection Bureau, New Hampshire

During the incident: Initiated an investigation of the matter with the assistance of third-party cybersecurity specialists
Notified the Federal Bureau of Investigation
Offering complimentary credit and identity protection monitoring to those individuals whose information may have been affected
Changes made: Implementing additional security measures
Implemented additional measures to enhance network security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Illinois State AGJan 1 · first

Montana State AG+319d

Massachusetts State AG+319d

Maine State AG+319d

HHS OCR+319d

New Hampshire State AG+319d · this page

Pattern: first filing Jan 1 (IL), last Nov 16 (NH) — a 319-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wyoming-county-community-health-system-20231116.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 16, 2023
Raw hash: b826c2dba8616aafe368acfa6b0831e3708333e849ab1eaa0c3f74ae4a3bed9a

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Press reports (1)

Reporting entityWyoming County Community Health System

Victim entityWyoming County Community Health System

IncidentUnknown

Stated responseInitiated an investigation of the matter with the assistance of third-party cybersecurity specialists

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov