HackingHealthcareHealthcareEmployee Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

YORK HOSPITAL

bd_a53a1cfb0e1b6b7f · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 4, 2016

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for YORK HOSPITAL →4 incidents on file

On February 22, 2016, cybercriminals stole personal identification information of York Hospital employees, including names, social security numbers, addresses, and 2015 W-2 wages. Approximately 1,211 Maine residents were affected, along with residents of Florida, Massachusetts, and New Hampshire. No patient health data was compromised. The hospital reported the incident to law enforcement and the FBI, engaged forensic experts, and offered credit protection services to affected employees.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 22, 2016

Begins

Mar 4, 2016

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: YORK HOSPITAL
norm: york hospital
Domain: www.yorkhospital.com

Name: YORK HOSPITAL
norm: york hospital
Domain: www.yorkhospital.com
Industry: Healthcarellm

Discovered: —
Breach occurred: Feb 22, 2016
Materiality determined: —
Notification sent: Feb 24, 2016
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial account
Data elements: Social Security number
Attack vector: Unknown
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice / Office of Attorney General

During the incident: Reported the theft to local law enforcement police
Continuing to work with the FBI investigation
Engaged private computer forensic experts to investigate the incident
Engaged legal counsel from the law firm of Verrill Dana
Agreed to pay for appropriate credit protection services such as a credit freeze, credit monitoring, credit fraud alerts, and provide advice on protecting against tax fraud
Continues to answer employee inquiries
Changes made: Engaged IT specialists and the law firm of Verrill Dana to develop and implement new safeguards in its information technology and information security systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/york-hospital-20160304.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 4, 2016
Raw hash: e99782253fa4961f850f16ad990e1de86d31bee115d0a8acbf260762a4ae961d

Reporting entityYORK HOSPITAL

Victim entityYORK HOSPITAL

IncidentUnknown

Stated responseReported the theft to local law enforcement police

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov