HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedPHIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Bayhealth Medical Center
bd_79aca51b0000ac77 · schema v1 · pii pii-v1
Full breach record for Bayhealth Medical Center →Bayhealth Medical Center experienced unauthorized access to its network between July 27 and July 31, 2024. The breach exposed Protected Health Information (PHI) and personal data of 185 New Hampshire residents. Bayhealth detected the suspicious activity on July 31, 2024, engaged forensic specialists, notified federal law enforcement, and provided credit monitoring services to affected individuals.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_362157ac2cddd018Montana State AGfiled 2025-02-03Verified
- bd_470d92e7afe21bdeMaine State AGfiled 2025-02-03Candidate
- bd_6d0e5c321460c8b6Delaware State AGfiled 2025-02-03Verified
- bd_950fc14168978470California State AGfiled 2025-02-03Verified
Show 2 more filings ↓Show fewer ↑
- bd_a959cc94549ef956Vermont State AGfiled 2025-02-03Verified
- bd_e01aeff7b3ae70e7Delaware State AGfiled 2025-02-03Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bayhealth-medical-center-20250203.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2025
- Raw hash
- 9dfa447f3c5c81a08e60e1bb558dbbaed989e032eb39a3dda114648d06807355
Reporting entity
- Name
- Bayhealth Hospitalnorm: bayhealth hospital
- Domain
- bayhealth.org
Victim entity
- Name
- Bayhealth Medical Centernorm: bayhealth medical center
Incident
- Discovered
- Jul 31, 2024
- Materiality determined
- Oct 1, 2024
- Notification sent
- Oct 4, 2024
- Affected individuals
- 185
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- notified federal law enforcementproviding written notice of this incident to relevant state and federal regulatorsnotifying the U.S. Department of Health and Human Services
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 27 weeks(187 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.