HackingIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Barlow Respiratory Hospital
bd_91adbcbf92f71c2c · schema v1 · pii pii-v1
Full breach record for Barlow Respiratory Hospital →Barlow Respiratory Hospital notified the New Hampshire Attorney General of a data security incident affecting one NH resident. Unauthorized access occurred between August 21 and September 1, 2021. The actor exfiltrated files containing PII (SSN, DL) and PHI. Discovered August 27, 2021. Notification sent December 30, 2021.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_c0d804abf0c242bbLeak Sitevicesocietyfiled 2022-01-06(7d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_aa1c857b3c9fefd0HHS OCRfiled 2021-12-30Verified
- bd_eee488eb88579f83California State AGfiled 2021-12-30Verified
- bd_c78d92e37fd7be23California State AGfiled 2022-03-04(64d gap)Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/barlow-respiratory-hospital-20211230.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2021
- Raw hash
- 635e362c316f8074934ce0bce2c39db09912f504883d0566d5f25ece19fd3f47
Reporting entity
- Name
- Barlow Respiratory Hospitalnorm: barlow respiratory hospital
Victim entity
- Name
- Barlow Respiratory Hospitalnorm: barlow respiratory hospital
Incident
- Discovered
- Aug 27, 2021
- Materiality determined
- —
- Notification sent
- Dec 30, 2021
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 weeks(125 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.