HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Self Regional Healthcare
bd_4223f24fcb92d75c · schema v1 · pii pii-v1
Full breach record for Self Regional Healthcare →Self Regional Healthcare notified consumers of a data breach involving third-party vendor Medibase Group, Inc. Unauthorized access occurred around Jan 26, 2024, discovered May 28, 2024. Affected data included names, SSNs, DOBs, and financial balances. No clinical data was impacted. Medibase engaged forensic investigators and reported to federal law enforcement. Affected individuals offered credit monitoring.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-07-24-self-regional-healthcare-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 24, 2024
- Raw hash
- c1fa335da51a39381867046313d76034011597e7b63d6e9b8397241d763caae9
Reporting entity
- Name
- Self Regional Healthcarenorm: self regional healthcare
Victim entity
- Name
- Self Regional Healthcarenorm: self regional healthcare
Incident
- Discovered
- May 28, 2024
- Materiality determined
- —
- Notification sent
- Jul 24, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported incident to U.S. federal law enforcement
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.