HackingStolen CredentialsTargetedPHIHEALTH_BASICIDENTITY_BASICLowContained
COMMUNITY HEALTH NETWORK, INC.
bd_741a818ff7d888e6 · schema v1 · pii pii-v1
Full breach record for COMMUNITY HEALTH NETWORK, INC. →Community Health Network, Inc. notified the NH Attorney General of unauthorized access to an employee email account between Feb 25-26, 2025. The incident potentially impacted PHI of 2 NH residents, including names, DOBs, and treatment details. Notification to residents began Sept 12, 2025.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_1b20517a693bcd49Maine State AGfiled 2025-09-14(8d gap)Verified
- bd_793eb2693d6f5c16Maine State AGfiled 2025-09-14(8d gap)Verified
- bd_8e7d5e4eafd827a1Indiana State AGfiled 2025-09-12(10d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/community-health-network-20250922.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 22, 2025
- Raw hash
- 5836ffcd753ec18caa7727a5ed08ccdfa3f9995f73230e4aba72d2396cd04ad1
Reporting entity
- Name
- McDonaldnorm: mcdonald
- Domain
- mcdonalds-menus.us
Victim entity
- Name
- COMMUNITY HEALTH NETWORK, INC.norm: community health network
Incident
- Discovered
- Feb 25, 2025
- Materiality determined
- Sep 12, 2025
- Notification sent
- Sep 12, 2025
- Affected individuals
- 2
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Office of the Attorney General, New Hampshire
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 30 weeks(209 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.