HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Bayhealth Medical Center

bd_6d649b7cadf1148b · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 31, 2024

Filed

Feb 3, 2025

To disclose

—

Affected

66state residents only

Linked

11 filings

Confidence

66%

Full breach record for Bayhealth Medical Center →4 incidents on file

Bayhealth Medical Center notified Nebraska AG of a data event occurring between July 27-31, 2024, discovered July 31, 2024. Unauthorized access resulted in the acquisition of names, SSNs, driver's license numbers, and PHI. 66 Nebraska residents were notified starting October 4, 2024. Response included forensic investigation, law enforcement notification, and 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

Incident timeline

undetected · 4 days

Jul 27, 2024

Begins

Jul 31, 2024

Discovered

Feb 3, 2025

Filed

This filing is one of 11 about the same incident.View merged incident

A leak claim by rhysida about this victim predates this filing by 179 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siterhysidabd_186c09df44f3bb052024-08-07 · +179dVerified

Regulatory filings (9) · sorted by filing gap

Montana State AGbd_362157ac2cddd0182025-02-03Verified
Maine State AGbd_470d92e7afe21bde2025-02-03Verified
New Hampshire State AGbd_79aca51b0000ac772025-02-03Verified
California State AGbd_950fc141689784702025-02-03Verified

Show 5 more filings ↓up to 122d gap

Vermont State AGbd_a959cc94549ef9562025-02-03Verified
Massachusetts State AGbd_d8e00c7d2babf4692025-02-03Verified
Delaware State AGbd_e01aeff7b3ae70e72025-02-03Verified
Illinois State AGbd_5688b7f798a8d9062025-02-01 · +2dCandidate
HHS OCRbd_1423e93c664283e02024-10-04 · +122dVerified

Name: Bayhealth Medical Center
norm: bayhealth medical center
Domain: bayhealth.org

Name: Bayhealth Medical Center
norm: bayhealth medical center
Domain: bayhealth.org
Industry: Healthcarellm

Discovered: Jul 31, 2024
Breach occurred: Jul 27, 2024 – Jul 31, 2024
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 4, 2024
Affected individuals: 66state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: notified federal law enforcement regarding the incidentproviding written notice of this incident to relevant state and federal regulatorsnotifying the U.S. Department of Health and Human Services
Initial access: exploit_public_facing

During the incident: Launched an investigation, with the assistance of forensic specialists
Secured its environment
Notified federal law enforcement regarding the incident
Providing access to credit monitoring services for twelve (12) months, through IDX
Providing written notice of this incident to relevant state and federal regulators
Notifying the U.S. Department of Health and Human Services
Changes made: Working to implement additional safeguards and training to its employees
Reviewing and enhancing our policies and procedures to reduce the risk of similar incidents recurring
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

HHS OCROct 4 · first

Illinois State AG+120d

Montana State AG+122d

Maine State AG+122d

New Hampshire State AG+122d

California State AG+122d

Vermont State AG+122d

Massachusetts State AG+122d

Delaware State AG+122d

Nebraska State AG+122d · this page

Pattern: first filing Oct 4 (DE), last Feb 3 (NE) — a 122-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/Bayhealth, Inc. - Notice of Data Event - NE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 3, 2025
Raw hash: 702b59aa001fab1a18e2a1d870920bcc9db3734e709038884c1a5e4ee7f8de14

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityBayhealth Medical Center

Victim entityBayhealth Medical Center

Incidentdiscovered Jul 31, 2024

Stated responseLaunched an investigation, with the assistance of forensic specialists

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov