HackingStolen CredentialsData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Milford Regional Medical Center
bd_5ea4998ee7c861fe · schema v1 · pii pii-v1
Full breach record for Milford Regional Medical Center →Milford Regional Medical Center (MRMC) notified the New Hampshire Attorney General on June 26, 2020, of a data breach involving its third-party vendor, PaperlessPay Corporation. An unauthorized individual accessed PaperlessPay's SQL server on February 18, 2020, potentially exposing current and former employees' names, Social Security numbers, and bank account details. MRMC identified 16 potentially impacted New Hampshire residents. MRMC offered one year of complimentary identity monitoring and transitioned to an in-house payroll solution.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed16 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/milford-regional-medical-20200626.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 31, 1969
- Raw hash
- b0806e8f546b31ec47de784acaeaffc2fb1bd68b63f377ec519823aa923d091c
Reporting entity
- Name
- Milford Regional Medical Centernorm: milford regional medical center
Victim entity
- Name
- Milford Regional Medical Centernorm: milford regional medical center
Incident
- Discovered
- Mar 20, 2020
- Materiality determined
- —
- Notification sent
- Jun 26, 2020
- Affected individuals
- 16
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney GeneralCooperated with DHS and FBI investigation
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.