HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedIdentity (basic)Health (basic)LowContained

Southwest Family Medicine Associates

bd_779ec7d8d0744383 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 7, 2024

Filed

Nov 12, 2024

To disclose

14 weeks

Affected

4state residents only

Linked

7 records

Confidence

65%

Full breach record for Southwest Family Medicine Associates →

South West Family Medicine Associates, PA notified the NH Attorney General of a network security incident affecting 4 NH residents. Unauthorized access occurred between July 3 and August 7, 2024. Patient information was potentially impacted. The organization engaged forensic investigators and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d14 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 35 days

discovery → filing · 14 weeks / 97 days

Jul 3, 2024

Begins

Aug 7, 2024

Discovered

Nov 12, 2024

Filed

vs. sector median

+5 wks slower

This filing is one of 7 records about the same incident.View merged incident

A leak claim by bianlian about this victim was first seen 91 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebianlianbd_18f534242947244b2024-08-13 · +90dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_a4d4c4ac8b63a1032024-11-08 · +4dVerified
Maine State AGbd_380197d4cbfb73772024-11-07 · +5dCandidate
Montana State AGbd_51f1dec5f33c98412024-11-07 · +5dVerified
Indiana State AGbd_84cfa0fdfd6e9f0c2024-11-07 · +5dVerified

Show 1 more filing ↓up to 5d gap

HHS OCRbd_e4512f9aba8d72c62024-11-07 · +5dVerified

Name: Southwest Family Medicine Associates
norm: southwest family medicine associates
Domain: sfmahealth.com

Name: Southwest Family Medicine Associates
norm: southwest family medicine associates
Domain: sfmahealth.com
Industry: Healthcarellm

Discovered: Aug 7, 2024
Breach occurred: Jul 3, 2024 – Aug 7, 2024
Undetected for: 35 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 7, 2024
Affected individuals: 4state-resident count only
Data types: Identity (basic)Health (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: valid_credentials

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Conducted an extensive forensic investigation and internal review
Providing the affected residents with notification of this incident
Offering the affected residents with complimentary membership with a credit monitoring service
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(97 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGNov 7 · first

Montana State AGNov 7 · first

Indiana State AGNov 7 · first

HHS OCRNov 7 · first

Massachusetts State AG+1d

New Hampshire State AG+5d · this page

Pattern: first filing Nov 7 (ME), last Nov 12 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/south-west-family-medicine-20241112.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2024
Raw hash: f6db71acd0444aa503358ccb0d61a289ec5b85ec8aa5586b6f4457ec9d306505

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entitySouthwest Family Medicine Associates

Victim entitySouthwest Family Medicine Associates

Incidentdiscovered Aug 7, 2024

Stated responseCommenced a prompt and thorough investigation

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov