HackingHealthcareHealthcareStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDPHIHealth (basic)MediumContained

Howard Memorial Hospital

bd_28c19f6e56f11940 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 4, 2022

Filed

Jan 27, 2023

To disclose

8 weeks

Affected

7state residents only

Linked

7 filings

Confidence

64%

Full breach record for Howard Memorial Hospital →2 incidents on file

Howard Memorial Hospital notified patients and employees of a data security incident where an unknown actor stole data between Nov 14 and Dec 4, 2022. Suspicious activity was detected on Dec 4, 2022. Impacted data included PHI, SSNs, and medical records. The hospital engaged forensic specialists, secured its network, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 20 days

discovery → filing · 8 weeks / 54 days

Nov 14, 2022

Begins

Dec 4, 2022

Discovered

Jan 27, 2023

Filed

vs. sector median

1 wks faster

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_1c61459d54bd7d762023-01-27Verified
Massachusetts State AGbd_27d25d1e51008ed32023-01-27Verified
HHS OCRbd_32695660b370b03b2023-01-27Verified
Maine State AGbd_fa243c6a3cd164b32023-01-27Verified

Show 2 more filings ↓up to 26d gap

New Hampshire State AGbd_644ff764bcb89bf52023-02-02 · +6dVerified
Illinois State AGbd_6fa40c84bdb225772023-01-01 · +26dVerified by operator

Name: Howard Memorial Hospital
norm: howard memorial hospital
Domain: howardmemorial.com

Name: Howard Memorial Hospital
norm: howard memorial hospital
Domain: howardmemorial.com
Industry: Healthcarellm

Discovered: Dec 4, 2022
Breach occurred: Nov 14, 2022 – Dec 4, 2022
Undetected for: 20 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 27, 2023
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Provided notice to federal law enforcementWill be provided to the U.S. Department of Health and Human Services
Initial access: valid_credentials

During the incident: Took steps to secure HMH’s network
Began investigation with assistance from outside cybersecurity specialists
Provided notice to federal law enforcement
Offering access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance
Changes made: Reviewing existing policies and procedures
Implementing additional administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

Vermont State AG+26d

Massachusetts State AG+26d

HHS OCR+26d

Maine State AG+26d

Montana State AG+26d · this page

New Hampshire State AG+32d

Pattern: first filing Jan 1 (IL), last Feb 2 (NH) — a 32-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-805.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 27, 2023
Raw hash: 6b54024c8e2b533771db74ce95c2f42bac5a9f6907d287ebe3240af5f4f0393d

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityHoward Memorial Hospital

Victim entityHoward Memorial Hospital

Incidentdiscovered Dec 4, 2022

Stated responseTook steps to secure HMH’s network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov