HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Health (basic)PHILowContained

Fairfield Memorial Hospital

bd_58f5d1200c115135 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 20, 2024

Filed

Oct 21, 2024

To disclose

18 weeks

Affected

2state residents only

Linked

6 filings

Confidence

65%

Full breach record for Fairfield Memorial Hospital →

Fairfield Memorial Hospital Association notified individuals on October 21, 2024, of unauthorized network access detected on June 20, 2024. The incident exposed names, dates of birth, medical diagnoses, treatment info, health insurance info, medical record numbers, and dates of service. The hospital engaged a cybersecurity firm, secured its network, and offered 24 months of credit monitoring and fraud assistance.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 weeks / 123 days

Jun 20, 2024

Discovered

Oct 21, 2024

Filed

vs. sector median

+5 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelockbit_3bd_44b173dcc22738e92024-07-02 · +111dCandidate
Leak Sitelockbit_3bd_100f8e0a1110f1092024-06-20 · +123dVerified by operator

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_90409acca46b4dd12024-10-21Verified by operator
Illinois State AGbd_5157448dc4025e4b2024-10-01 · +20dVerified
HHS OCRbd_394bf6c7c63034892024-08-15 · +67dVerified

Name: Fairfield Memorial Hospital
norm: fairfield memorial hospital
Domain: fairfieldmemorial.org

Name: Fairfield Memorial Hospital
norm: fairfield memorial hospital
Domain: fairfieldmemorial.org
Industry: Healthcarellm

Discovered: Jun 20, 2024
Materiality determined: —
Notification sent: Oct 21, 2024
Affected individuals: 2state-resident count only
Data types: Identity (basic)Health (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External

During the incident: Engaged a specialized cybersecurity firm to investigate the nature and scope of the incident
Took steps to secure its network
Offering Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance through Cyberscout
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(123 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

HHS OCRAug 15 · first

Illinois State AG+47d

Indiana State AG+67d

Montana State AG+67d · this page

Pattern: first filing Aug 15 (IL), last Oct 21 (MT) — a 67-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1777.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 21, 2024
Raw hash: 9db35b89c3df27d1c98c8de7d2bb5169c8be2f984ed3ab6b8f25d6ecd847d256

Linked disclosures

Ransomware claims (2)

Regulatory filings (3) · sorted by filing gap

Reporting entityFairfield Memorial Hospital

Victim entityFairfield Memorial Hospital

Incidentdiscovered Jun 20, 2024

Stated responseEngaged a specialized cybersecurity firm to investigate the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov