HackingStolen CredentialsTargetedIDENTITY_BASICLowContained
Central New York Cardiology
bd_37da44f2bdd3eaa2 · schema v1 · pii pii-v1
Full breach record for Central New York Cardiology →Central New York Cardiology notified consumers of a data breach occurring between Dec 26-30, 2024. Unauthorized access to network activity resulted in the acquisition of names and variable data elements. No evidence of misuse was found. The provider offered 12-24 months of credit monitoring and identity protection services.
Vermont clock✗ VT AG >45 bday30 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_282a4b72346ee03cNew Hampshire State AGfiled 2025-08-04(7d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-28-central-new-york-cardiology-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 28, 2025
- Raw hash
- 6387d39ed8cad6735ef4d258035d81ca0952a25df87b7af3f14b7ea315a7906f
Reporting entity
- Name
- Central New York Cardiologynorm: central new york cardiology
Victim entity
- Name
- Central New York Cardiologynorm: central new york cardiology
Incident
- Discovered
- Dec 30, 2024
- Materiality determined
- Jun 11, 2025
- Notification sent
- Jul 25, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 30 weeks(210 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.