UnknownHealthcareHealthcareCustomer Data InvolvedEmployee Data InvolvedPHIIdentity (basic)LowContained

MHMR Authority of Brazos Valley

bd_90ead781bcdc39a1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 5, 2022

Filed

Jul 28, 2023

To disclose

38 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

67%

Full breach record for MHMR Authority of Brazos Valley →

MHMR Authority of Brazos Valley experienced a security incident on November 5, 2022, disrupting access to computer systems. A forensic review completed in May 2023 identified that personal and protected health information of employees and patients may have been accessed. The organization engaged forensic experts, notified law enforcement, and is offering credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday38 weeks discovery → filing

Incident timeline

discovery → filing · 38 weeks / 265 days

Nov 5, 2022

Discovered

Jul 28, 2023

Filed

vs. sector median

+25 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitehivebd_6445d4c7067f42fe2022-12-22 · +218dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_872d53b345374dec2023-07-28Candidate
Montana State AGbd_8fd70e87ceed898b2023-07-28Verified
Maine State AGbd_866ef8fd9da653d72023-08-01 · +4dVerified
Massachusetts State AGbd_f4bd3ec2e60be6502023-08-01 · +4dVerified

Show 1 more filing ↓up to 150d gap

HHS OCRbd_a7fe7a90c1c53edc2023-02-28 · +150dVerified

Name: MHMR Authority of Brazos Valley
norm: mhmr authority of brazos valley
Domain: mhmrabv.org

Name: MHMR Authority of Brazos Valley
norm: mhmr authority of brazos valley
Domain: mhmrabv.org
Industry: Healthcarellm

Discovered: Nov 5, 2022
Materiality determined: —
Notification sent: Jul 28, 2023
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)
Attack vector: Unknown
Regulator citations: Reported the incident to law enforcementCooperating with the FBI

During the incident: Took immediate steps to secure our systems
Launched an investigation
Engaged independent digital forensics and incident response experts
Performed a comprehensive review of all data that may have been affected
Reported the incident to law enforcement
Cooperating with the FBI to aid in their investigation
Offering credit monitoring and identity protection services through IDX
Changes made: Implemented measures to enhance the security of our environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(265 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

HHS OCRFeb 28 · first

Indiana State AG+150d

Montana State AG+150d

Vermont State AG+150d · this page

Maine State AG+154d

Massachusetts State AG+154d

Pattern: first filing Feb 28 (TX), last Aug 1 (MA) — a 154-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-07-28-mhmr-authority-brazos-valley-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 28, 2023
Raw hash: aa8350b6ebd5b892ccdb479d551ef460454940c3386c46544bd50bb730b7671b

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityMHMR Authority of Brazos Valley

Victim entityMHMR Authority of Brazos Valley

Incidentdiscovered Nov 5, 2022

Stated responseTook immediate steps to secure our systems

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov