HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Sarah D. Culbertson Memorial Hospital
bd_6d3697bd78c24e7f · schema v1 · pii pii-v1
Full breach record for Sarah D. Culbertson Memorial Hospital →Sarah D. Culbertson Memorial Hospital experienced unauthorized network access between March 27-30, 2023. Suspicious activity was detected on March 30, 2023. The incident involved the potential exposure of patient names, addresses, and Social Security numbers. The hospital engaged forensic specialists, notified law enforcement, and offered one year of credit monitoring to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_7a2a94155c1fa901Montana State AGfiled 2023-11-21(44d gap)Candidate
- bd_4d140656dd04ea45New Hampshire State AGfiled 2023-10-21(75d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/sarah-d-culbertson-memorial-hospital-20240104.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 4, 2024
- Raw hash
- 5d8338672330ae2dd6866c448bbce06bed75716ca5741e3af4879907be2860e3
Reporting entity
- Name
- Sarah D. Culbertson Memorial Hospitalnorm: sarah d culbertson memorial hospital
Victim entity
- Name
- Sarah D. Culbertson Memorial Hospitalnorm: sarah d culbertson memorial hospital
Incident
- Discovered
- Mar 30, 2023
- Materiality determined
- Sep 25, 2023
- Notification sent
- May 8, 2023
- Affected individuals
- 5
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- notified federal law enforcement regarding the eventproviding written notice of this incident to state and federal regulators, as necessary
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 40 weeks(280 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.