HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDFinancialPHIHealth (basic)MediumContained

The Good Samaritan Health Center of Cobb

bd_3fbd19462327f407 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 4, 2024

Filed

Jul 31, 2025

To disclose

38 weeks

Affected

1state residents only

Linked

5 filings

Confidence

67%

Full breach record for The Good Samaritan Health Center of Cobb →

Good Samaritan Health Center of Cobb detected suspicious activity on its computer systems on November 4, 2024. An unauthorized actor potentially accessed and acquired data including names, SSNs, financial info, driver's licenses, and medical/insurance info. One New Hampshire resident was affected. The organization secured systems, engaged a forensic firm, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d38 weeks discovery → filing

Incident timeline

discovery → filing · 38 weeks / 269 days

Nov 4, 2024

Discovered

Jul 31, 2025

Filed

vs. sector median

+27 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteqilinbd_3e8b8be5a08007932024-11-25 · +248dVerified by operator

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_78a091c461cca6522025-08-04 · +4dCandidate
Nebraska State AGbd_db2e7f5ebb4efbd82025-08-04 · +4dVerified
Massachusetts State AGbd_d744e24d8c4c872a2025-08-06 · +6dVerified by operator

Name: The Good Samaritan Health Center of Cobb
norm: the good samaritan health center of cobb
Domain: goodsamcobb.org

Name: The Good Samaritan Health Center of Cobb
norm: the good samaritan health center of cobb
Domain: goodsamcobb.org
Industry: Healthcarellm

Discovered: Nov 4, 2024
Materiality determined: —
Notification sent: Aug 4, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancialPHIHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Unknown
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney General

During the incident: Secured its systems
Engaged a specialized third-party cybersecurity firm to conduct a comprehensive investigation
Conducted a review of the potentially accessed files to identify the clients whose sensitive information was present
Notified the potentially affected individuals
Offered twelve (12) months of complimentary credit monitoring and identity theft restoration services through Transunion
Provided guidance on how to better protect against identity theft and fraud
Changes made: Adopted encryption technologies
Changed passwords
Updated Security Rule Risk Management plan
Implemented new technical safeguards
Implemented periodic technical and non-technical evaluations
Updated Security Rule Risk Analysis
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(269 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGJul 31 · first · this page

Indiana State AG+4d

Nebraska State AG+4d

Massachusetts State AG+6d

Pattern: first filing Jul 31 (NH), last Aug 6 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/good-samaritan-health-center-cobb-20250731.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2025
Raw hash: 12904d7588662fa0ae57a0729ac2d8379d99cb05c98c1ee80a70d73c8ab6f4bb

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityThe Good Samaritan Health Center of Cobb

Victim entityThe Good Samaritan Health Center of Cobb

Incidentdiscovered Nov 4, 2024

Stated responseSecured its systems

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov