HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Val Verde Regional Medical Center
bd_89c69c9b9d69a163 · schema v1 · pii pii-v1
Full breach record for Val Verde Regional Medical Center →Val Verde Regional Medical Center (VVRMC) notified the New Hampshire Attorney General of a data security incident occurring on March 10, 2022. The breach affected approximately 8 New Hampshire residents, exposing names, SSNs, dates of birth, and medical/insurance information. VVRMC engaged forensic experts, secured its network, and notified the FBI. Affected individuals received notification letters on May 24, 2022, offering 12 months of complimentary identity monitoring through Kroll.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0e1a6b115fa40039HHS OCRfiled 2022-05-24Verified
- bd_db8529db05a2df59Maine State AGfiled 2022-05-24Verified
- bd_f619b243a19de8daMontana State AGfiled 2022-05-24Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/val-verde-20220524.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 24, 2022
- Raw hash
- 54521189fe1329ef83a42c51248d3f05d5fec373e06d1be0ca4ece2daddd382c
Reporting entity
- Name
- Lewis Brisbois Bisgaard & Smith, PLLCnorm: lewis brisbois bisgaard smith
Victim entity
- Name
- Val Verde Regional Medical Centernorm: val verde regional medical center
Incident
- Discovered
- Mar 24, 2022
- Materiality determined
- —
- Notification sent
- May 24, 2022
- Affected individuals
- 8
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified the Attorney General of New Hampshire
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.