HackingHealthcareHealthcareStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Hendry Regional Medical Center

bd_8923030a8d5ead8a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 25, 2022

Filed

Mar 12, 2024

To disclose

19 months

Affected

4state residents only

Linked

4 filings

Confidence

65%

Hendry Regional Medical Center notified individuals of a cybersecurity incident detected on August 25, 2022, where an unauthorized third party gained temporary access to its network. Compromised data included names, addresses, DOBs, SSNs, medical info, and phone numbers. HRMC engaged external IT specialists, secured the network, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d19 months discovery → filing

Incident timeline

discovery → filing · 19 months / 565 days

Aug 25, 2022

Begins

Aug 25, 2022

Discovered

Mar 12, 2024

Filed

vs. sector median

+72 wks slower

This filing is one of 4 filings about the same incident.View merged incident

A leak claim by hive about this victim was first seen 532 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_4e90cb2ff0a48dfd2024-03-12Verified
Indiana State AGbd_e9923a0f6e593e5e2024-03-12Verified
Vermont State AGbd_f8877c4a794b8b262024-03-12Verified

Name: Hendry Regional Medical Center
norm: hendry regional medical center

Name: Hendry Regional Medical Center
norm: hendry regional medical center
Industry: Healthcarellm

Discovered: Aug 25, 2022
Breach occurred: Aug 25, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 12, 2024
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Moved quickly to secure our network environment
Launched a thorough investigation
Investigation was performed with the help of external IT specialists
HRMC performed data mining on the affected systems
Proceeded with substitute notice
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Implementing additional safeguards and enhanced security measures
Changing all passwords
Updating our firewall and VPN
Reviewed and taken steps to enhance our policies and procedures relating to the security of our systems and servers
Information life cycle management
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 months(565 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGMar 12 · first

Indiana State AGMar 12 · first

Vermont State AGMar 12 · first

Montana State AGMar 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1180.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 12, 2024
Raw hash: f9132c2cecd97850b5b4a32be07b4a0d36015fb62f9f54195c36201fcdfa771c

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHendry Regional Medical Center

Victim entityHendry Regional Medical Center

Incidentdiscovered Aug 25, 2022

Stated responseMoved quickly to secure our network environment

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov