Mothers' Milk Bank of North Texas
bd_570664bfb991e8d2 · schema v1 · pii pii-v1
Full breach record for Mothers' Milk Bank of North Texas →Mothers' Milk Bank of North Texas (MMBNT) notified the New Hampshire Attorney General of a data breach involving its third-party service provider, Timeless Medical Systems (TMS). On December 18, 2022, TMS discovered unauthorized access to a cloud-based file storage application used by MMBNT, resulting in the exfiltration of personal information. The incident affected 8 New Hampshire residents. Notification letters were mailed on March 14, 2023, offering 24 months of credit monitoring. TMS engaged cybersecurity experts, notified law enforcement, and is migrating MMBNT data to a local server.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_a560c25112ac4dd0Maine State AGfiled 2023-04-13(4d gap)Verified
- bd_7083271c12eeee8fMontana State AGfiled 2023-04-12(5d gap)Candidate
- bd_8a6ed48147f37fd7Maine State AGfiled 2023-04-12(5d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mothers-milk-bank-20230417.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2023
- Raw hash
- a10d820befa6a94c20bb936a6465867c7670f4139a96af7769fca137ae42ff61
Reporting entity
- Name
- Mothers' Milk Bank of North Texasnorm: mothers milk bank of north texas
Victim entity
- Name
- Mothers' Milk Bank of North Texasnorm: mothers milk bank of north texas
Incident
- Discovered
- Dec 18, 2022
- Materiality determined
- —
- Notification sent
- Mar 14, 2023
- Affected individuals
- 8
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- filed a report with the FBI and other law enforcement agenciesfacilitate notices to regulators, state Attorneys General, and other parties
- Third party
- via Timeless Medical Systems
- Initial access
- supply_chain
Compliance
- Time to disclose
- 17 weeks(120 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.