HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
BANNER HEALTH
bd_47377d5f3cbb422e · schema v1 · pii pii-v1
Full breach record for BANNER HEALTH →Banner Health notified the New Hampshire Attorney General on August 3, 2016, regarding unauthorized access to patient servers occurring on June 17, 2016. The breach affected approximately 379 New Hampshire residents, exposing names, SSNs, health information, and financial data. Banner provided credit monitoring and established a call center.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_0588cdfba1eacf3dWashington State AGfiled 2016-08-03Candidate
- bd_84becbd39b03c2c2Montana State AGfiled 2016-08-03Verified
- bd_ac773cf578b8482aCalifornia State AGfiled 2016-08-03Verified
- bd_cb3e26b4ba0ad5ccOregon State AGfiled 2016-08-03Verified
Show 1 more filing ↓Show fewer ↑
- bd_efb36ded28ef2d7dHHS OCRfiled 2016-08-03Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/banner-health-20160803.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 3, 2016
- Raw hash
- e0da08f39f1ddc3cd18c5e78885d86f8f8f895a8d71cd582bfc4180103b4a841
Reporting entity
- Name
- BANNER HEALTHnorm: banner health
- Domain
- bannerhealth.com
Victim entity
- Name
- BANNER HEALTHnorm: banner health
- Domain
- bannerhealth.com
Incident
- Discovered
- Jul 13, 2016
- Materiality determined
- —
- Notification sent
- Aug 3, 2016
- Affected individuals
- 379
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.