HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive

Rehabilitation Hospital of Northern Arizona

bd_777e8f0f8b0136a3 · schema v1 · pii pii-v1

Full breach record for Rehabilitation Hospital of Northern Arizona →

Rehabilitation Hospital of Northern Arizona notified the NH Attorney General of a breach occurring Jan 16–Feb 4, 2024, discovered Feb 1, 2024. Unauthorized access to IT systems resulted in patient PII (names + SSN/DOB/ID) exposure. Notifications mailed March 29, 2024, offering 1-year credit monitoring. Systems isolated; forensic investigation ongoing.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_93f6dee5b495ff4aHHS OCRfiled 2024-03-29Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/rehabilitation-hospital-northern-arizona-20240329.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 29, 2024
Raw hash: 856611bc18f51342c1784b2eff141376d2b555f9d179034faec63f92ba62b31e

Reporting entity

Name: Rehabilitation Hospital of Northern Arizona
norm: rehabilitation hospital of northern arizona

Victim entity

Name: Rehabilitation Hospital of Northern Arizona
norm: rehabilitation hospital of northern arizona

Incident

Discovered: Feb 1, 2024
Materiality determined: —
Notification sent: Mar 29, 2024
Affected individuals: Not disclosed
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

Compliance

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.