HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPIIMediumContained
HCF of Warren Inc.
bd_6653069fb6bd6ece · schema v1 · pii pii-v1
Full breach record for HCF of Warren Inc. →HCF of Warren notified consumers of a data breach affecting patient records. Unauthorized access occurred on September 17, 2024, discovered October 3, 2024. Data exposed included names, SSNs, DOBs, addresses, and medical/insurance info. HCF engaged forensic investigators, notified law enforcement, and offered credit monitoring. No specific victim count disclosed.
Vermont clock✗ VT AG >45 bday14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_fa7f99a77f1e8fc5New Hampshire State AGfiled 2025-01-13(4d gap)Verified
- bd_aba74ba78c8b215aMaryland State AGfiled 2025-11-13(308d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-09-hcf-warren-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 9, 2025
- Raw hash
- f9fdf2424e7fa42c6449db4c2beaddd4c7fd33b7499aed2049ca79429c7ed8a9
Reporting entity
- Name
- HCF of Warren Inc.norm: hcf of warren
Victim entity
- Name
- HCF of Warren Inc.norm: hcf of warren
Incident
- Discovered
- Oct 3, 2024
- Materiality determined
- —
- Notification sent
- Jan 9, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified law enforcement and is cooperating with its investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(98 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.