HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICHighContained
Cerner Corporation
bd_5aaa91f7765d92b0 · schema v1 · pii pii-v1
Full breach record for Cerner Corporation →Cerner Corporation submitted a supplemental breach notification to the New Hampshire Attorney General on June 22, 2026, updating the count of affected individuals to 60,247 NH residents. The incident involved unauthorized access to legacy Cerner systems starting January 22, 2025, discovered on March 7, 2025. Affected data included names, SSNs, and PHI. Notification letters were mailed starting July 25, 2025, offering 24 months of credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1cf557c8f978720eOregon State AGfiled 2026-07-06(14d gap)Verified
- bd_e36a95d7c53add13Texas State AGfiled 2026-07-07(15d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/cerner-corporation-20260622.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 22, 2026
- Raw hash
- 49580bfe8459f45f35b055cd2bad289362c12acf5a182b7d5134fd76849b8057
Reporting entity
- Name
- Cerner Corporationnorm: cerner
- Domain
- cerner.com
Victim entity
- Name
- Cerner Corporationnorm: cerner
- Domain
- cerner.com
Incident
- Discovered
- Mar 7, 2025
- Materiality determined
- —
- Notification sent
- Jul 25, 2025
- Affected individuals
- 60,247
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- federal law enforcement asked to delay patient notification
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 16 months(472 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.