Wyoming County Community Health System
bd_419f068d1e58cd28 · schema v1 · pii pii-v1
Full breach record for Wyoming County Community Health System →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Nokoyawa on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Wyoming County Community Health System has been serving Wyoming County and the surrounding area for over 110 years and continues its commitment of providing outstanding healthcare services for our rural community.WCCHS, a full service, County-owned health system comprised of a 62-bed...
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
May 12, 2023
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Illinois State AGbd_971599afbe66f7512023-01-01 · +131dVerified by operator
- Montana State AGbd_217c042e5aab02432023-11-16 · +188dVerified
- New Hampshire State AGbd_27eb370edf1742ce2023-11-16 · +188dVerified
- Massachusetts State AGbd_70e78e4ce643e4212023-11-16 · +188dVerified by operator
Show 2 more filings ↓Show fewer ↑up to 188d gap
- Maine State AGbd_d793d0ba5b25f7d32023-11-16 · +188dVerified by operator
- HHS OCRbd_dee36e47a3e253912023-11-16 · +188dVerified
Press reports (1)
- Pressnokoyawabd_a1c269d62cbdcf882023-03-28 · +45dCandidate
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Nov 16 (NY) — a 319-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
nokoyawa
According to ransomware.live, Nokoyawa is a double-extortion ransomware group that launched a RaaS program in 2022 (operated by threat actor "farnetwork"), primarily targeting businesses in South America across healthcare, financial services, government, and manufacturing, gaining significant attention in 2023 for exploiting a Windows CLFS zero-day (CVE-2023-28252).