HackingHealthcareHealthcareStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDPHIHealth (basic)Financial accountMediumContained

Huron Regional Medical Center

bd_66d03a5c496bc2bc · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 31, 2025

Filed

Sep 9, 2025

To disclose

14 weeks

Affected

20state residents only

Linked

6 filings

Confidence

66%

Full breach record for Huron Regional Medical Center →

Huron Regional Medical Center, Inc. notified individuals of a data event discovered on May 31, 2025, involving unauthorized access to sensitive patient information including PHI, SSNs, and financial data. HRMC engaged forensic specialists and legal counsel, and is offering 12 months of credit monitoring and fraud assistance to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 101 days

May 31, 2025

Discovered

Sep 9, 2025

Filed

vs. sector median

+2 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebeastbd_842ffccecd8ab0662025-05-31 · +101dVerified by operator

Regulatory filings (4) · sorted by filing gap

Nebraska State AGbd_3ea19d5c9ef017182025-09-09Verified by operator
Indiana State AGbd_e800de1151eea1cf2025-09-09Verified by operator
Illinois State AGbd_65c1c1f2a817e0102025-09-01 · +8dVerified by operator
HHS OCRbd_765748f8067991912025-06-06 · +95dVerified

Name: Huron Regional Medical Center
norm: huron regional medical center
Domain: huronregional.org

Name: Huron Regional Medical Center
norm: huron regional medical center
Domain: huronregional.org
Industry: Healthcarellm

Discovered: May 31, 2025
Materiality determined: —
Notification sent: Sep 9, 2025
Affected individuals: 20state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)Financial account
Data elements: Medical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Began an investigation into the scope and nature of the suspicious activity
Retained legal counsel and third-party forensic specialists to investigate the suspicious activity
Began a comprehensive review of the data set
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(101 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

HHS OCRJun 6 · first

Illinois State AG+87d

Nebraska State AG+95d

Indiana State AG+95d

Montana State AG+95d · this page

Pattern: first filing Jun 6 (SD), last Sep 9 (MT) — a 95-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/09/Consumer-notification-letter-18.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 9, 2025
Raw hash: a4f1bf13e750cd7a111435d7c61bf6246063e6ff5cbd6c5f9faf653e1e16eb12

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityHuron Regional Medical Center

Victim entityHuron Regional Medical Center

Incidentdiscovered May 31, 2025

Stated responseBegan an investigation into the scope and nature of the suspicious activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov