HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Central New York Cardiology
bd_282a4b72346ee03c · schema v1 · pii pii-v1
Full breach record for Central New York Cardiology →Central New York Cardiology notified New Hampshire AG of a breach affecting 8 NH residents. Unauthorized access occurred Dec 26-30, 2024. Data included names, DOB, SSN, and medical info. CNYC engaged forensic specialists, secured systems, notified law enforcement, and offered credit monitoring. Notices sent July 25, 2025.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_37da44f2bdd3eaa2Vermont State AGfiled 2025-07-28(7d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/central-new-york-cardiology-20250804.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 4, 2025
- Raw hash
- dae882a0781ce899d6c39e12e31d3a0e6bf2777cc6cf60150350bc91cb31a516
Reporting entity
- Name
- Central New York Cardiologynorm: central new york cardiology
Victim entity
- Name
- Central New York Cardiologynorm: central new york cardiology
Incident
- Discovered
- Dec 30, 2024
- Materiality determined
- —
- Notification sent
- Jul 25, 2025
- Affected individuals
- 8
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 31 weeks(217 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.