HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumContained
North Broward Hospital District
bd_9cebea73a9d76880 · schema v1 · pii pii-v1
Full breach record for North Broward Hospital District →North Broward Hospital District (d/b/a Broward Health) notified the New Hampshire Attorney General of a data breach affecting 633 NH residents. Unauthorized access occurred on October 15, 2021, via a third-party medical provider's credentials. The intrusion was discovered on October 19, 2021. Exfiltrated data included PHI, SSNs, financial account info, and employee PII. The FBI and DOJ were notified; notification to residents was delayed per DOJ request until January 1, 2022. Remediation included password resets, MFA implementation, and third-party forensic investigation.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8005a0ba482c26afHHS OCRfiled 2022-01-02(1d gap)Verified
- bd_77fabe65e122cd08Montana State AGfiled 2022-01-01(2d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/north-broward-hospital-district-dba-broward-health-20220103.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 3, 2022
- Raw hash
- 458a896b644b54e5df8e398c111ef2606f3f41cea858897f5687afc63fcd5828
Reporting entity
- Name
- North Broward Hospital Districtnorm: north broward hospital district
Victim entity
- Name
- North Broward Hospital Districtnorm: north broward hospital district
Incident
- Discovered
- Oct 19, 2021
- Materiality determined
- —
- Notification sent
- Jan 1, 2022
- Affected individuals
- 633
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the FBI and the Department of Justice (DOJ)DOJ requested that Broward Health delay any notification through December 31, 2021
- Initial access
- supply_chain
Compliance
- Time to disclose
- 11 weeks(76 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.