Wyoming County Community Health System
bd_a1c269d62cbdcf88 · schema v1 · pii pii-v1
Full breach record for Wyoming County Community Health System →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.
Daviess Community Hospital Investigating Potential Cyberattack. Wyoming County Community Health System: The Wyoming County Community Health System in New York notified 24,016 patients of a March 2023 attack that exposed sensitive data, and has since strengthened its security and offered credit monitoring services. Linked ransomware group: nokoyawa.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Mar 28, 2023
Press report
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitenokoyawabd_419f068d1e58cd282023-05-12 · +45dVerified by operator
Regulatory filings (6) · sorted by filing gap
- Illinois State AGbd_971599afbe66f7512023-01-01 · +86dVerified by operator
- Montana State AGbd_217c042e5aab02432023-11-16 · +233dVerified
- New Hampshire State AGbd_27eb370edf1742ce2023-11-16 · +233dVerified
- Massachusetts State AGbd_70e78e4ce643e4212023-11-16 · +233dVerified by operator
Show 2 more filings ↓Show fewer ↑up to 233d gap
- Maine State AGbd_d793d0ba5b25f7d32023-11-16 · +233dVerified by operator
- HHS OCRbd_dee36e47a3e253912023-11-16 · +233dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Nov 16 (NY) — a 319-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
nokoyawa
According to ransomware.live, Nokoyawa is a double-extortion ransomware group that launched a RaaS program in 2022 (operated by threat actor "farnetwork"), primarily targeting businesses in South America across healthcare, financial services, government, and manufacturing, gaining significant attention in 2023 for exploiting a Windows CLFS zero-day (CVE-2023-28252).