DisclosureLens
MalwareHealthcareHealthcareRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPHIMediumContained

Lamoille Health Partners

bd_73720fe4f4c0f848 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 13, 2022

Filed

Dec 22, 2022

To disclose

27 weeks

Affected

431state residents only

Linked

6 records

Confidence

65%
Full breach record for Lamoille Health Partners →

Lamoille Health Partners reported a supplemental ransomware incident to New Hampshire AG. Unauthorized access occurred June 12-13, 2022, resulting in file encryption and potential data exfiltration. 431 NH residents affected. Data included names, SSNs, driver's licenses, financial accounts, and PHI. Discovery was June 13, 2022. Remediation included forensic investigation, law enforcement notification, and credit monitoring services.

Leak gap clock⏱ Leak >90d27 weeks discovery → filing

Incident timeline

undetected · 1 days
discovery → filing · 27 weeks / 192 days

Jun 12, 2022

Begins

Jun 13, 2022

Discovered

Oct 26, 2022

Scope determined

Dec 22, 2022

Filed

vs. sector median

+18 wks slower

This filing is one of 6 records about the same incident.View merged incident
A leak claim by blackbyte about this victim was first seen 169 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Massachusetts State AGAug 11 · first
Montana State AGAug 11 · first
Maine State AGAug 11 · first
HHS OCRAug 11 · first
New Hampshire State AG+133d · this page

Pattern: first filing Aug 11 (MA), last Dec 22 (NH) — a 133-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.