HackingCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
HOSPITAL SISTERS HEALTH SYSTEM
bd_72355d0affccd4a0 · schema v1 · pii pii-v1
Full breach record for HOSPITAL SISTERS HEALTH SYSTEM →Hospital Sisters Health System (HSHS) filed a supplemental notice with the New Hampshire Attorney General regarding a data security incident. HSHS discovered unauthorized third-party access to its network on August 27, 2023. The attacker accessed files between August 16 and August 27, 2023. The incident affected 41 New Hampshire residents, whose personal information (including SSNs and medical IDs) was accessed. HSHS engaged forensic investigators, notified law enforcement, and offered credit monitoring services.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_63d403f97d8c8da8California State AGfiled 2025-02-06(1d gap)Verified
- bd_8324213e82150fabWashington State AGfiled 2025-02-06(1d gap)Candidate
- bd_8dc5bdc41b329c97Maine State AGfiled 2025-02-06(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/hospital-sisters-health-system-20250207.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 7, 2025
- Raw hash
- 9a71f2c8c531f882d5ada8d6b112b0357b2224c0c800f9cfedb127f71ed25036
Reporting entity
- Name
- HOSPITAL SISTERS HEALTH SYSTEMnorm: hospital sisters health system
Victim entity
- Name
- HOSPITAL SISTERS HEALTH SYSTEMnorm: hospital sisters health system
Incident
- Discovered
- Aug 27, 2023
- Materiality determined
- —
- Notification sent
- Aug 30, 2024
- Affected individuals
- 41
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- reported the incident to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 months(530 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.