MisuseHealthcareHealthcarePrivilege AbuseEmployee Data InvolvedTargetedIdentity (basic)Government IDMediumContained

MEMORIAL HEALTH SYSTEM

bd_6f5e9d17e45bf80e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 27, 2012

Filed

Apr 12, 2012

To disclose

11 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for MEMORIAL HEALTH SYSTEM →7 incidents on file

Memorial Healthcare System notified the NH Attorney General of an insider breach where two former employees improperly accessed patient PII (names, DOB, SSNs) for fraudulent tax returns. Incident discovered Jan 27, 2012. One NH resident affected. Remediation included policy refinement and enhanced auditing.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 391 days

discovery → filing · 11 weeks / 76 days

Jan 1, 2011

Begins

Jan 27, 2012

Discovered

Apr 12, 2012

Filed

vs. sector median

2 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_0d72abb1d6112dee2012-04-13 · +1dVerified
Massachusetts State AGbd_06d72be731e557132012-04-17 · +5dVerified

Name: MEMORIAL HEALTH SYSTEM
norm: memorial health system

Name: MEMORIAL HEALTH SYSTEM
norm: memorial health system
Industry: Healthcarellm

Discovered: Jan 27, 2012
Breach occurred: Jan 1, 2011 – Feb 1, 2012
Undetected for: 391 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 12, 2012
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: InternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney GeneralCooperating with law enforcement investigation
Initial access: insider_action

During the incident: Terminated the two employees involved
Actively cooperating with law enforcement
Delayed notification to follow law enforcement instructions
Notified patients as quickly as possible after law enforcement confirmation
Offered one year of free professional identity theft protection services through First Watch ID
Changes made: Continued to refine privacy policies
Reinforced with all staff the importance of handling patient information
Enhanced auditing controls by taking advantage of recent advances in best practice technology
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGApr 12 · first · this page

HHS OCR+1d

Massachusetts State AG+5d

Pattern: first filing Apr 12 (NH), last Apr 17 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/memorial-healthcare-20120412.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2012
Raw hash: 0171864316ab531353d928fab0987de4d4b3de5c3218e377cacba81cd7123f24

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMEMORIAL HEALTH SYSTEM

Victim entityMEMORIAL HEALTH SYSTEM

Incidentdiscovered Jan 27, 2012

Stated responseTerminated the two employees involved

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov