MalwareHealthcareHealthcareRansomwareData EncryptedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)MediumContained

Wayne Memorial Hospital

bd_4a3a5b5a92d6120f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 3, 2024

Filed

Sep 8, 2025

To disclose

15 months

Affected

11state residents only

Linked

11 filings

Confidence

66%

Full breach record for Wayne Memorial Hospital →2 incidents on file

Wayne Memorial Hospital notified the New Hampshire Attorney General of a ransomware incident. Unauthorized access occurred between May 30 and June 3, 2024. The attacker encrypted data and left a ransom note. 11 New Hampshire residents were affected, with data including names, SSNs, driver's licenses, financial account numbers, and PHI. WMH contained the breach, restored from backups, engaged forensic investigators, reset passwords, and mailed notifications on August 27, 2025, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d15 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 4 days

discovery → filing · 15 months / 462 days

May 30, 2024

Begins

Jun 3, 2024

Discovered

Sep 8, 2025

Filed

vs. sector median

+55 wks slower

This filing is one of 11 about the same incident.View merged incident

A leak claim by monti about this victim predates this filing by 462 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitemontibd_b9a1b20ea9c4502f2024-06-30 · +434dVerified
Leak Sitemontibd_ead7e5cf61e941172024-06-03 · +462dVerified

Regulatory filings (8) · sorted by filing gap

Texas State AGbd_5c0d27e2856b33002025-09-09 · +1dVerified
Maine State AGbd_4b1cd5f26ef29daa2025-09-07 · +1dVerified
Massachusetts State AGbd_8d43056b8b431a352025-09-07 · +1dVerified
Vermont State AGbd_e1539c0ea8da55742025-09-07 · +1dVerified

Show 4 more filings ↓up to 402d gap

Montana State AGbd_fb6dd2f52bc66a392025-09-07 · +1dVerified
Nebraska State AGbd_a18fbae130892d282025-08-27 · +12dVerified
Indiana State AGbd_325db4432f75dfd12025-08-02 · +37dVerified
HHS OCRbd_a42c696e8556d0362024-08-02 · +402dVerified

Name: Wayne Memorial Hospital
norm: wayne memorial hospital
Domain: wmh.org

Name: Wayne Memorial Hospital
norm: wayne memorial hospital
Domain: wmh.org
Industry: Healthcarellm

Discovered: Jun 3, 2024
Breach occurred: May 30, 2024 – Jun 3, 2024
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 27, 2025
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Disconnected access to its network and took certain systems offline
Restored its network from backups
Engaged legal counsel and cybersecurity professionals
Added new intrusion detection and response tools
Reset all passwords
Made additional enhancements to WMH’s network security
Published a public notice of this event on its website
Published a media notice with the Press Sentinel
Mailed individual notification letters
Offered complimentary credit monitoring and identity theft protection services
Changes made: Added new intrusion detection and response tools
Reset all passwords
Made additional enhancements to WMH’s network security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(462 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

HHS OCRAug 2 · first

Indiana State AG+365d

Nebraska State AG+390d

Maine State AG+401d

Massachusetts State AG+401d

Vermont State AG+401d

Montana State AG+401d

New Hampshire State AG+402d · this page

Texas State AG+403d

Pattern: first filing Aug 2 (GA), last Sep 9 (TX) — a 403-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wayne-memorial-hospital-20250908.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 8, 2025
Raw hash: 47ba8f972261f4848042fa65cd699efa4887fd30b1f4d8b12318fda38bb17c9f

Linked disclosures

Ransomware claims (2)

Regulatory filings (8) · sorted by filing gap

Reporting entityWayne Memorial Hospital

Victim entityWayne Memorial Hospital

Incidentdiscovered Jun 3, 2024

Stated responseDisconnected access to its network and took certain systems offline

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov