HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Uintah Basin Healthcare
bd_793c4ab76a8e3c9d · schema v1 · pii pii-v1
Full breach record for Uintah Basin Healthcare →Uintah Basin Healthcare notified patients of a data breach involving unauthorized network access. The incident, discovered Nov 7, 2022, potentially exposed names, SSNs, DOBs, addresses, insurance info, and clinical details for patients seen between March 2012 and Nov 2022. UBH engaged forensic investigators, notified the FBI, and offered credit monitoring.
Vermont clock✗ VT AG >45 bday26 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_415f1ac33d574165Montana State AGfiled 2023-05-09Candidate
- bd_eb01c57f3c007511HHS OCRfiled 2023-05-10(1d gap)Candidate
- bd_56524b94f00dd018Maine State AGfiled 2023-05-12(3d gap)Verified
- bd_b04aa0771e10f15fOregon State AGfiled 2023-05-12(3d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-05-09-uintah-basin-healthcare-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 9, 2023
- Raw hash
- c62160db5f3c696f23232b831057fc7d0b3e258b7a94080ca2babee7335aa6a1
Reporting entity
- Name
- Uintah Basin Healthcarenorm: uintah basin healthcare
Victim entity
- Name
- Uintah Basin Healthcarenorm: uintah basin healthcare
Incident
- Discovered
- Nov 7, 2022
- Materiality determined
- Apr 7, 2023
- Notification sent
- Apr 10, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- notified the Federal Bureau of Investigation
Compliance
- Time to disclose
- 26 weeks(183 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.