HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Sarah D. Culbertson Memorial Hospital
bd_4d140656dd04ea45 · schema v1 · pii pii-v1
Full breach record for Sarah D. Culbertson Memorial Hospital →Sarah D. Culbertson Memorial Hospital notified New Hampshire residents of a cybersecurity incident involving unauthorized network access between March 27 and 30, 2023. The breach potentially exposed personal information, including Social Security numbers, of approximately two New Hampshire residents. The hospital engaged third-party forensic specialists, notified federal law enforcement, and provided credit monitoring services to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_7a2a94155c1fa901Montana State AGfiled 2023-11-21(31d gap)Candidate
- bd_6d3697bd78c24e7fNew Hampshire State AGfiled 2024-01-04(75d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/sarah-d-culbertson-memorial-hospital-20231121.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 21, 2023
- Raw hash
- 4e91f1df448b2565caa7b822766da69f16324b1e6e125b4871c7cea919d74f1d
Reporting entity
- Name
- Sarah D. Culbertson Memorial Hospitalnorm: sarah d culbertson memorial hospital
Victim entity
- Name
- Sarah D. Culbertson Memorial Hospitalnorm: sarah d culbertson memorial hospital
Incident
- Discovered
- Mar 30, 2023
- Materiality determined
- —
- Notification sent
- Nov 21, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 weeks(205 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.