HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumContained
Mount Desert Island Hospital
bd_529604a4efb3f8f5 · schema v1 · pii pii-v1
Full breach record for Mount Desert Island Hospital →Mount Desert Island Hospital, Inc. notified consumers of a data breach where unauthorized access occurred between April 28 and May 7, 2023. The incident exposed PHI, SSNs, driver's licenses, and financial data. The hospital engaged third-party specialists, notified law enforcement, and offered credit monitoring services.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_044b7cb6e8c5de74New Hampshire State AGfiled 2023-07-14(14d gap)Verified
- bd_d67d09f2ab8c5b20Montana State AGfiled 2023-07-14(14d gap)Candidate
- bd_437493e24886ba99Maine State AGfiled 2023-07-17(17d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-06-30-mount-desert-island-hospital-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2023
- Raw hash
- be6b31f094f8a9a268b65518a9d250bb45261ce794d9c06c27bebe721421863d
Reporting entity
- Name
- Mount Desert Island Hospitalnorm: mount desert island hospital
- Domain
- mdihospital.org
Victim entity
- Name
- Mount Desert Island Hospitalnorm: mount desert island hospital
- Domain
- mdihospital.org
Incident
- Discovered
- May 4, 2023
- Materiality determined
- Jun 21, 2023
- Notification sent
- Jun 30, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.