HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

BANNER HEALTH

bd_47377d5f3cbb422e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 13, 2016

Filed

Aug 3, 2016

To disclose

21 days

Affected

379state residents only

Linked

7 filings

Confidence

66%

Full breach record for BANNER HEALTH →2 incidents on file

Banner Health notified the New Hampshire Attorney General on August 3, 2016, regarding unauthorized access to patient servers occurring on June 17, 2016. The breach affected approximately 379 New Hampshire residents, exposing names, SSNs, health information, and financial data. Banner provided credit monitoring and established a call center.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 26 days

discovery → filing · 21 days

Jun 17, 2016

Begins

Jul 13, 2016

Discovered

Aug 3, 2016

Filed

vs. sector median

9 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Washington State AGbd_0588cdfba1eacf3d2016-08-03Candidate
Montana State AGbd_84becbd39b03c2c22016-08-03Verified
Massachusetts State AGbd_ac336604b83cc8692016-08-03Verified
California State AGbd_ac773cf578b8482a2016-08-03Verified

Show 2 more filings ↓

Oregon State AGbd_cb3e26b4ba0ad5cc2016-08-03Verified
HHS OCRbd_efb36ded28ef2d7d2016-08-03Verified

Name: BANNER HEALTH
norm: banner health
Domain: bannerhealth.com

Name: BANNER HEALTH
norm: banner health
Domain: bannerhealth.com
Industry: Healthcarellm

Discovered: Jul 13, 2016
Breach occurred: Jun 17, 2016
Undetected for: 26 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 3, 2016
Affected individuals: 379state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Mailing notifications to approximately 379 New Hampshire residents
Providing substitute notification by posting a statement on its website and issuing a press release
Offering affected individuals a free one-year membership in credit monitoring and fraud monitoring protection services through Kroll
Established a dedicated call center
Worked quickly to block the attackers and enhance the security of its systems
Changes made: Enhanced the security of its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Washington State AGAug 3 · first

Montana State AGAug 3 · first

Massachusetts State AGAug 3 · first

California State AGAug 3 · first

Oregon State AGAug 3 · first

HHS OCRAug 3 · first

New Hampshire State AGAug 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/banner-health-20160803.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 3, 2016
Raw hash: e0da08f39f1ddc3cd18c5e78885d86f8f8f895a8d71cd582bfc4180103b4a841

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityBANNER HEALTH

Victim entityBANNER HEALTH

Incidentdiscovered Jul 13, 2016

Stated responseMailing notifications to approximately 379 New Hampshire residents

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov