Social EngineeringPhishingDelayed DiscoveryIDENTITY_BASICLowContained
McKenzie County Healthcare System, Inc.
bd_47a2ebba1576c394 · schema v1 · pii pii-v1
Full breach record for McKenzie County Healthcare System, Inc. →McKenzie County Healthcare Systems, Inc. notified consumers on April 10, 2024, of a breach affecting employee email accounts accessed between Oct 2-4, 2023. The incident likely involved phishing. Affected data includes names. The company offered credit monitoring and is reviewing security policies. No specific victim count was disclosed in the filing.
Vermont clock✗ VT AG >45 bday27 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f4e88d007ea9a5b1New Hampshire State AGfiled 2024-04-10Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-10-mckenzie-county-healthcare-systems-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 10, 2024
- Raw hash
- d653c8b37f729a3cdf0c09e6f5784d359ebecb5b19773831b96126aa5a5c674a
Reporting entity
- Name
- McKenzie County Healthcare System, Inc.norm: mckenzie county healthcare system
Victim entity
- Name
- McKenzie County Healthcare System, Inc.norm: mckenzie county healthcare system
Incident
- Discovered
- Oct 5, 2023
- Materiality determined
- Apr 10, 2024
- Notification sent
- Apr 10, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 27 weeks(188 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.