HackingHealthcareHealthcareSupply Chain (3P Vendor)Customer Data InvolvedPIIPHILowContained

TriHealth H, LLC

bd_7507af5be9bec964 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 23, 2024

Filed

Feb 28, 2025

To disclose

18 weeks

Affected

1state residents only

Confidence

68%

Full breach record for TriHealth H, LLC →3 incidents on file

TriHealth Physician Partners reported a data security incident involving a vendor's unauthorized access to historical electronic documents from the 'For Women' physician practice (pre-2020). The incident affected one New Hampshire resident's personal information. TriHealth engaged forensic firms and offered Kroll identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 weeks / 128 days

Oct 23, 2024

Discovered

Feb 28, 2025

Filed

vs. sector median

+7 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: TriHealth H, LLC
norm: trihealth h

Name: TriHealth H, LLC
norm: trihealth h
Also named: TriHealth H, LLCdba oflegal entity
TriHealth Physician Partnersdba oftrade name
Industry: Healthcarellm

Discovered: Oct 23, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: PIIPHI
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: Partner
Regulator citations: Notified New Hampshire Attorney General
Initial access: supply_chain

During the incident: Worked with our internal forensic team and an external forensic firm to confirm the security of our computer systems
Secured the services of Kroll to provide complimentary (or free of charge) identity monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(128 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/trihealth-h-physician-partners-20250228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 28, 2025
Raw hash: 39fb4ed627b9052c0a36c7ccfbbc18b4d1ec23129f9faa374fdc0cf563afe3a6

Reporting entityTriHealth H, LLC

Victim entityTriHealth H, LLC

Incidentdiscovered Oct 23, 2024

Stated responseWorked with our internal forensic team and an external forensic firm to confirm the security of our computer systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov