AccidentalHealthcareHealthcareLossSupply Chain (3P Vendor)PIIPHIFinancialHighResolved

SOUTH SHORE HOSPITAL, INC.

bd_3fba96928d42cb87 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Sep 9, 2010

To disclose

—

Affected

800,000scope not determined

Confidence

66%

Full breach record for SOUTH SHORE HOSPITAL, INC. →5 incidents on file

South Shore Hospital filed a supplemental notice with the NH AG regarding the loss of backup tapes during offsite destruction by vendor Iron Mountain/Graham Magnetics. The hospital concluded there is little to no risk of data acquisition. Approximately 800,000 individuals' PII, PHI, and financial info were potentially affected. No individual notices were sent based on forensic findings.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 26, 2010

Begins

Sep 9, 2010

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed800,000 affectedView incident

Name: SOUTH SHORE HOSPITAL, INC.
norm: south shore hospital
Domain: southshorehospital.org

Name: SOUTH SHORE HOSPITAL, INC.
norm: south shore hospital
Domain: southshorehospital.org
Industry: Healthcarellm

Discovered: —
Breach occurred: Feb 26, 2010 – Jun 17, 2010
Materiality determined: —
Notification sent: Sep 9, 2010
Affected individuals: 800,000scope not determined
Data types: PIIPHIFinancial
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Reported findings to the Massachusetts Attorney General’s OfficeReported findings to the US Department of Health and Human Services

During the incident: Engaged computer forensic experts from Huron Consulting Group
Hired an outside private investigative team
Conducted multi-state searches for the missing boxes
Reported findings to the Massachusetts Attorney General’s Office
Reported findings to the US Department of Health and Human Services
Issued revised notices to media outlets
Provided updated information on its website and toll-free information line
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/south-shore-hospital-20100909.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 9, 2010
Raw hash: 564b70c41aa716ee0aa2aacd3585600589d66df45d8e04f29bb89b611fa9ec37

Reporting entitySOUTH SHORE HOSPITAL, INC.

Victim entitySOUTH SHORE HOSPITAL, INC.

IncidentThird-Party / Supply Chain

Stated responseEngaged computer forensic experts from Huron Consulting Group

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov