HackingIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Huron Regional Medical Center

bd_3ea19d5c9ef01718 · schema v1 · pii pii-v2

Severity

Medium

Discovered

May 31, 2025

Filed

Sep 9, 2025

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

67%

Full breach record for Huron Regional Medical Center →

Huron Regional Medical Center, Inc. (HRMC) notified individuals of a data event discovered on May 31, 2025, involving unauthorized access to patient records. Affected data includes names, SSNs, DOBs, Medicare/Medicaid numbers, and financial account info. HRMC retained forensic specialists and legal counsel, offering 12 months of credit monitoring and fraud assistance. The notice was mailed September 9, 2025.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

Incident timeline

May 31, 2025

Discovered

Sep 9, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

A leak claim by beast about this victim predates this filing by 101 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebeastbd_842ffccecd8ab0662025-05-31 · +101dVerified by operator

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_66d03a5c496bc2bc2025-09-09Verified by operator
Indiana State AGbd_e800de1151eea1cf2025-09-09Verified by operator
Illinois State AGbd_65c1c1f2a817e0102025-09-01 · +8dVerified by operator
HHS OCRbd_765748f8067991912025-06-06 · +95dVerified

Name: Huron Regional Medical Center
norm: huron regional medical center
Domain: huronregional.org

Name: Huron Regional Medical Center
norm: huron regional medical center
Domain: huronregional.org

Discovered: May 31, 2025
Materiality determined: —
Notification sent: Sep 9, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External

During the incident: Began an investigation into the scope and nature of the suspicious activity
Retained legal counsel and third-party forensic specialists to investigate the suspicious activity
Began a comprehensive review of the data set
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

HHS OCRJun 6 · first

Illinois State AG+87d

Montana State AG+95d

Indiana State AG+95d

Nebraska State AG+95d · this page

Pattern: first filing Jun 6 (SD), last Sep 9 (NE) — a 95-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/59f9eb21-db89-4416-9cf7-a08288d603df.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 9, 2025
Raw hash: ae26aeacf604ab8b7c092c2a5634da0ca302f444e72d89054cd386cbfd4e4d60

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityHuron Regional Medical Center

Victim entityHuron Regional Medical Center

Incidentdiscovered May 31, 2025

Stated responseBegan an investigation into the scope and nature of the suspicious activity

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov