HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumContained

Heartland Health Center

bd_a5f51d90e496110e · schema v1 · pii pii-v2

Severity

Medium

Discovered

Feb 4, 2025

Filed

Oct 17, 2025

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for Heartland Health Center →5 incidents on file

Heartland Health Center notified Nebraska AG of a data incident discovered on February 4, 2025, where an unknown third party gained unauthorized access to its network. The breach exposed personal information including names, SSNs, DOBs, driver's license numbers, financial account numbers, and PHI (medical diagnoses, records, Medicare/Medicaid numbers). The organization engaged forensic consultants, secured systems, and is offering 12 months of credit monitoring via Cyberscout/TransUnion. Notices were sent on October 17, 2025.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

Incident timeline

Feb 4, 2025

Discovered

Oct 17, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

A leak claim by lockbit_3 about this victim predates this filing by 575 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_1ee456f0ab511bcc2025-02-24 · +234dVerified by operator

Name: Heartland Health Center
norm: heartland health center
Domain: heartlandhealthcenter.org

Name: Heartland Health Center
norm: heartland health center
Domain: heartlandhealthcenter.org
Industry: Healthcarellm

Discovered: Feb 4, 2025
Materiality determined: —
Notification sent: Oct 17, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Engaged the appropriate forensic consultants to investigate the root of the incident
Secure its systems
Securing the compromised systems
Initiating an investigation into the unauthorized access
Changes made: Utilized additional resources in an effort to assess the impact of the incident and better protect Heartland Health from future instances like this one
Continuously upgrading our already robust security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/b61bc7a7-c99e-4a0f-b1d6-ed677567f85c.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 17, 2025
Raw hash: 892789d761ab7da9352438152b912ae62ea5f55cbb4f52f6071de6391c7bf782

Linked disclosures

Ransomware claims (1)

Reporting entityHeartland Health Center

Victim entityHeartland Health Center

Incidentdiscovered Feb 4, 2025

Stated responseEngaged the appropriate forensic consultants to investigate the root of the incident

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov