HackingHealthcareManufacturingHealthcareStolen CredentialsCapture Stored DataData ExfiltratedTargetedPIIIdentity (basic)LowContained

BAXTER INTERNATIONAL INC.

bd_75491fc7b65560ae · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 10, 2024

Filed

Aug 8, 2024

To disclose

8 weeks

Affected

30state residents only

Linked

4 filings

Confidence

66%

Full breach record for BAXTER INTERNATIONAL INC. →4 incidents on file

Baxter International, Inc. notified Montana residents of a data breach discovered on June 10, 2024, where an unauthorized third party downloaded files containing personal information. The incident was contained and investigation concluded by August 8, 2024. No SSN evidence found. Baxter engaged forensic experts and deployed additional security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 59 days

Jun 10, 2024

Discovered

Aug 8, 2024

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_93b8033fc82959bd2024-08-08Verified
Vermont State AGbd_a5cfd0aa3fd2c5052024-08-08Verified
Illinois State AGbd_5d1e6b39725d31dc2024-08-01 · +7dVerified

Name: BAXTER INTERNATIONAL INC.
norm: baxter international

Name: BAXTER INTERNATIONAL INC.
norm: baxter international
Industry: HealthcarellmManufacturingllm

Discovered: Jun 10, 2024
Materiality determined: —
Notification sent: Aug 8, 2024
Affected individuals: 30state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation with the support of outside counsel and leading cybersecurity and forensic experts
Took prompt action to respond to this incident
Deployed additional security measures and tools with the guidance of third-party cybersecurity experts
Changes made: Secured systems and contain the incident
Deployed additional security measures and tools with the guidance of third-party cybersecurity experts to further strengthen the security of our network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Illinois State AGAug 1 · first

California State AG+7d

Vermont State AG+7d

Montana State AG+7d · this page

Pattern: first filing Aug 1 (IL), last Aug 8 (MT) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-862.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 8, 2024
Raw hash: 94eaefd27071fee8423cd8ab1ec4c982f1f689a064f28088aacf6cac61c08127

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityBAXTER INTERNATIONAL INC.

Victim entityBAXTER INTERNATIONAL INC.

Incidentdiscovered Jun 10, 2024

Stated responseLaunched an investigation with the support of outside counsel and leading cybersecurity and forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov