MisusePrivilege AbuseEmployee Data InvolvedTargetedPHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Elliot Health System
bd_3e7a718a5fe94ab8 · schema v1 · pii pii-v1
Full breach record for Elliot Health System →Elliot Health System notified New Hampshire regulators and patients of an insider threat incident where an employee accessed patient records without legitimate business reason. The unauthorized access occurred on August 8, 2025, and was discovered on August 15, 2025. Affected data included demographic information, Social Security numbers, and clinical appointment details. The organization implemented employee education and enhanced monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/elliot-health-systems-20250911.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 11, 2025
- Raw hash
- 7c4957f809f6f757633c3a736de82a32777b1c99a8d09f69305051598352fc74
Reporting entity
- Name
- Elliot Health Systemnorm: elliot health system
Victim entity
- Name
- Elliot Health Systemnorm: elliot health system
Incident
- Discovered
- Aug 15, 2025
- Materiality determined
- —
- Notification sent
- Sep 9, 2025
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Insider
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.