HackingCustomer Data InvolvedEmployee Data InvolvedPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
HOSPITAL SISTERS HEALTH SYSTEM
bd_63d403f97d8c8da8 · schema v1 · pii pii-v1
Full breach record for HOSPITAL SISTERS HEALTH SYSTEM →Hospital Sisters Health Systems (HSHS) discovered on August 27, 2023, that an unauthorized third party gained temporary access to its network between August 16 and August 27, 2023. The incident potentially exposed personal information including names, addresses, dates of birth, medical record numbers, limited treatment information, health insurance information, Social Security numbers, and driver's license numbers. HSHS contained the incident, engaged forensic investigators, and is offering one year of credit monitoring to affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_8324213e82150fabWashington State AGfiled 2025-02-06Candidate
- bd_8dc5bdc41b329c97Maine State AGfiled 2025-02-06Verified
- bd_72355d0affccd4a0New Hampshire State AGfiled 2025-02-07(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-598352
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 6, 2025
- Raw hash
- 21b3b23e09604ce5e45503baa21b70b269c44c2a759c8695e2dd2b9741e533c7
Reporting entity
- Name
- HOSPITAL SISTERS HEALTH SYSTEMnorm: hospital sisters health system
Victim entity
- Name
- HOSPITAL SISTERS HEALTH SYSTEMnorm: hospital sisters health system
Incident
- Discovered
- Aug 27, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement
Compliance
- Time to disclose
- 18 months(529 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.