PhysicalHealthcareManufacturingHealthcareTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHighContained

SIEMENS HEALTHCARE DIAGNOSTICS INC.

bd_45f64a84497e829e · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Apr 3, 2008

To disclose

—

Affected · nationwide

3,54212 in this filing

Linked

2 filings

Confidence

66%

Full breach record for SIEMENS HEALTHCARE DIAGNOSTICS INC. →

Siemens Healthcare Diagnostics Inc. reported the theft of a company laptop containing employee names, birthdates, and SSNs from an employee's home on March 26, 2008. Approximately 3,542 individuals were affected, including 12 New Hampshire residents. Notices were sent on April 7, 2008.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 26, 2008

Begins

Apr 3, 2008

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_100f353d6e7fa8e02008-04-07 · +4dVerified

Name: SIEMENS HEALTHCARE DIAGNOSTICS INC.
norm: siemens healthcare diagnostics
Domain: siemens.com

Name: SIEMENS HEALTHCARE DIAGNOSTICS INC.
norm: siemens healthcare diagnostics
Domain: siemens.com
Industry: HealthcarellmManufacturingllm

Discovered: —
Breach occurred: Mar 26, 2008
Materiality determined: —
Notification sent: Apr 7, 2008
Affected individuals: 3,542state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Alerted the police
Investigation is underway
Reexamining current data privacy and security policies and procedures
Changes made: Reexamining current data privacy and security policies and procedures to find ways of reducing the risk of future data breaches
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 3 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/siemens-healthcare-20080403.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 3, 2008
Raw hash: a7cdfec929f2c575683857f52512c3ec2a41e759fc9c16f027f72e1ce5b1d97d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySIEMENS HEALTHCARE DIAGNOSTICS INC.

Victim entitySIEMENS HEALTHCARE DIAGNOSTICS INC.

IncidentUnknown

Stated responseAlerted the police

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov