HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Heart to Heart Hospice

bd_4c6812c23cbcfe5c · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 18, 2025

To disclose

—

Affected

3state residents only

Linked

4 filings

Confidence

67%

Full breach record for Heart to Heart Hospice →

Heart to Heart Hospice Holdings, LLC notified Montana residents of a data security incident where an unauthorized third party gained access to the network and acquired files containing deceased patients' personal information, including names, addresses, SSNs, health insurance, and medical treatment details. The company engaged forensic specialists, reported to law enforcement, and provided 12 months of free cyber monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 18, 2025

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteinc_ransombd_5e7667d35d6525972025-01-29 · +47dVerified

Regulatory filings (2) · sorted by filing gap

Nebraska State AGbd_22f73bbaa513c7982025-03-18Candidate
HHS OCRbd_d2418fd59139e40a2025-03-18Verified

Name: Heart to Heart Hospice
norm: heart to heart hospice
Domain: htohh.com

Name: Heart to Heart Hospice
norm: heart to heart hospice
Domain: htohh.com
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Mar 13, 2025
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Medical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to law enforcement
Initial access: valid_credentials

During the incident: Engaged third-party specialists to assist with securing the network environment and investigating the incident
Reported the incident to law enforcement
Implemented measures to further enhance the security of our network environment
Provided access to Cyber Monitoring services for the decedent at no charge
Changes made: Implemented measures to further enhance the security of our network environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Nebraska State AGMar 18 · first

HHS OCRMar 18 · first

Montana State AGMar 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/04/Consumer-notification-letter-2.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 18, 2025
Raw hash: 1a09570ed3fd1bc6b1a464cc6a844de07c3c49f65bdcd5f7c6fce32fd5c55fe2

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityHeart to Heart Hospice

Victim entityHeart to Heart Hospice

IncidentUnauthorized Access

Stated responseEngaged third-party specialists to assist with securing the network environment and investigating the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov