DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryPHIIdentity (basic)Government IDHealth (basic)FinancialMediumContained

Uintah Basin Healthcare

bd_793c4ab76a8e3c9d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 7, 2022

Filed

May 9, 2023

To disclose

26 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

65%
Full breach record for Uintah Basin Healthcare →

Uintah Basin Healthcare notified consumers of a data security incident where personal and protected health information of patients seen between March 2012 and November 2022 may have been accessed without authorization. The incident was discovered on November 7, 2022. Affected data included names, SSNs, health insurance info, and clinical details. UBH engaged cybersecurity firms, notified the FBI, and offered credit monitoring.

Vermont clock✗ VT AG >45 bday26 weeks discovery → filing

Incident timeline

undetected · 3903 days
discovery → filing · 26 weeks / 183 days

Mar 1, 2012

Begins

Nov 7, 2022

Discovered

May 9, 2023

Filed

vs. sector median

+17 wks slower

This filing is one of 8 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filings ↓up to 3d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗
Montana State AGMay 9 · first
Vermont State AGMay 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.