HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

ANNA JAQUES HOSPITAL

bd_86baa33310a3dfbe · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 5, 2024

To disclose

—

Affected

Not disclosed

Linked

8 filings

Confidence

66%

Full breach record for ANNA JAQUES HOSPITAL →

Anna Jaques Hospital notified consumers of a data breach involving unauthorized access to patient and employee records. Compromised data included names, SSNs, dates of birth, driver's license numbers, and financial account numbers. The hospital reset passwords, updated security policies, and offered 24 months of credit monitoring via Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Dec 5, 2024

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 8 about the same incident.View merged incident

A leak claim by moneymessage about this victim predates this filing by 320 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemoneymessagebd_b79385a89ec65c172024-01-19 · +320dVerified

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_52cf0518f02a8f1b2024-12-05Verified by operator
Indiana State AGbd_70918698b29d68ce2024-12-05Verified
Maine State AGbd_a2d1f21ff5fd6dad2024-12-05Verified
New Hampshire State AGbd_339059c3c4b680752024-12-10 · +5dVerified by operator

Show 2 more filings ↓up to 346d gap

HHS OCRbd_33eb2e085be46f0f2024-02-20 · +289dVerified
Pressmoneymessagebd_6da1cded0badab372023-12-25 · +346dCandidate

Name: ANNA JAQUES HOSPITAL
norm: anna jaques hospital

Name: ANNA JAQUES HOSPITAL
norm: anna jaques hospital
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Dec 5, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notice with Vermont Attorney General
Initial access: valid_credentials

During the incident: Reset passwords
Updated our information security policies
Continually evaluate and modify our practices and internal controls
Set up an external, dedicated call center
Changes made: Updated our information security policies
Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

PressDec 25 · first

HHS OCR+57d

Massachusetts State AG+346d

Indiana State AG+346d

Maine State AG+346d

Vermont State AG+346d · this page

New Hampshire State AG+351d

Pattern: first filing Dec 25, last Dec 10 (NH) — a 351-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-12-05-anna-jaques-hospital-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 5, 2024
Raw hash: 1bc700fe999ee50af2d7ffd3f34e00e200beb6c1e33fda2c6b087244f3148d9d

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityANNA JAQUES HOSPITAL

Victim entityANNA JAQUES HOSPITAL

IncidentUnauthorized Access

Stated responseReset passwords

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov