MisusePrivilege AbuseEmployee Data InvolvedIDENTITY_BASICHEALTH_BASICPHILowContained
North Country Hospital
bd_570ab76e9f210058 · schema v1 · pii pii-v1
Full breach record for North Country Hospital →North Country Hospital notified patients that a former employee may have taken physical records containing PHI and identity data upon ending employment on Feb 28, 2024. Law enforcement confirmed the employee did not retain the records. No financial data was taken. No specific count of affected individuals was disclosed.
Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-12-north-country-hospital-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 12, 2024
- Raw hash
- 9b216080710d9affa2bc499df6fcdb2607bc6f6bd6c329fe0c21102e72929ef5
Reporting entity
- Name
- North Country Hospitalnorm: north country hospital
Victim entity
- Name
- North Country Hospitalnorm: north country hospital
Incident
- Discovered
- Feb 28, 2024
- Materiality determined
- —
- Notification sent
- Apr 12, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASICPHI
- Attack vector
- Insider
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 6 weeks(44 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.