HackingVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedPIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICHighContained
Florida Community Health Centers
bd_97ee01f6efeaee74 · schema v1 · pii pii-v1
Full breach record for Florida Community Health Centers →Florida Community Health Centers reported a data breach affecting approximately 10,000 individuals. The incident involved unauthorized access to a public-facing application, resulting in the exfiltration of protected health information (PHI) and personally identifiable information (PII), including names, SSNs, and health records. The organization engaged forensic investigators and offered credit monitoring to affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0e4d1a601747b1e3Indiana State AGfiled 2024-07-01(4d gap)Verified
- bd_124b917ef0b00e64Maine State AGfiled 2024-07-01(4d gap)Candidate
- bd_3d1f8da21ff4c2f8Montana State AGfiled 2024-07-01(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/florida-community-health-centers-20240705.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 5, 2024
- Raw hash
- 4ea81303565a5b444276c4697f6178e47392103ccaa6f6c5d9c39ee01f8bba68
Reporting entity
- Name
- Florida Community Health Centersnorm: florida community health centers
Victim entity
- Name
- Florida Community Health Centersnorm: florida community health centers
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 10,000
- Data types
- PIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.