HackingHealthcareHealthcareStolen CredentialsData ExfiltratedPHIPIIIdentity (basic)LowContained

Bayhealth Medical Center

bd_362157ac2cddd018 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 31, 2024

Filed

Feb 3, 2025

To disclose

27 weeks

Affected

61state residents only

Linked

11 filings

Confidence

65%

Full breach record for Bayhealth Medical Center →4 incidents on file

Bayhealth Medical Center notified Montana and Rhode Island residents of unauthorized network access occurring July 27-31, 2024. Suspicious activity was detected July 31, 2024. PHI and PII were accessed. The company engaged forensic specialists, notified law enforcement, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 27 weeks / 187 days

Jul 27, 2024

Begins

Jul 31, 2024

Discovered

Feb 3, 2025

Filed

vs. sector median

+15 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siterhysidabd_186c09df44f3bb052024-08-07 · +179dVerified

Regulatory filings (9) · sorted by filing gap

Maine State AGbd_470d92e7afe21bde2025-02-03Verified
Nebraska State AGbd_6d649b7cadf1148b2025-02-03Verified
New Hampshire State AGbd_79aca51b0000ac772025-02-03Verified
California State AGbd_950fc141689784702025-02-03Verified

Show 5 more filings ↓up to 122d gap

Vermont State AGbd_a959cc94549ef9562025-02-03Verified
Massachusetts State AGbd_d8e00c7d2babf4692025-02-03Verified
Delaware State AGbd_e01aeff7b3ae70e72025-02-03Verified
Illinois State AGbd_5688b7f798a8d9062025-02-01 · +2dCandidate
HHS OCRbd_1423e93c664283e02024-10-04 · +122dVerified

Name: Bayhealth Medical Center
norm: bayhealth medical center
Domain: bayhealth.org

Name: Bayhealth Medical Center
norm: bayhealth medical center
Domain: bayhealth.org
Industry: Healthcarellm

Discovered: Jul 31, 2024
Breach occurred: Jul 27, 2024 – Jul 31, 2024
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 3, 2025
Affected individuals: 61state-resident count only
Data types: PHIPIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: notified federal law enforcement
Initial access: valid_credentials

During the incident: Promptly investigated
Responded
Evaluated our system security
Notified federal law enforcement
Offering you credit monitoring and identity restoration services for twelve (12)/twenty-four (24) months at no cost to you
Changes made: Reviewing and enhancing our policies and procedures to reduce the risk of similar incidents recurring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(187 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

HHS OCROct 4 · first

Illinois State AG+120d

Maine State AG+122d

Nebraska State AG+122d

New Hampshire State AG+122d

California State AG+122d

Vermont State AG+122d

Massachusetts State AG+122d

Delaware State AG+122d

Montana State AG+122d · this page

Pattern: first filing Oct 4 (DE), last Feb 3 (MT) — a 122-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/02/Consumer-notification-letter-5.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 3, 2025
Raw hash: 43228df57ab364c22a3fc32beafc425acdf0c425e1f913f55308a5caaed13644

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityBayhealth Medical Center

Victim entityBayhealth Medical Center

Incidentdiscovered Jul 31, 2024

Stated responsePromptly investigated

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov