HackingHealthcareHealthcareCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDPHIHealth (basic)MediumContained

Southern Illinois OB-GYN Associates, S.C.

bd_a6b43a54b2fb784d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 24, 2025

Filed

May 19, 2026

To disclose

25 weeks

Affected

6state residents only

Linked

4 filings

Confidence

67%

Full breach record for Southern Illinois OB-GYN Associates, S.C. →

Southern Illinois OB-GYN detected suspicious network activity on November 24, 2025, leading to a network interruption. A forensic investigation determined that an unauthorized third party potentially viewed or downloaded data, including names, SSNs, dates of birth, and health information. Six New Hampshire residents were affected. The organization isolated systems, engaged forensic experts, and is offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 25 weeks / 176 days

Nov 24, 2025

Discovered

May 19, 2026

Filed

vs. sector median

+14 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

HHS OCRbd_3f59cfcaeefbf9212026-05-22 · +3dVerified
Illinois State AGbd_c6571d050c4bb1932026-06-01 · +13dCandidate
Massachusetts State AGbd_cf6d8fec32195f462026-06-05 · +17dCandidate

Name: Southern Illinois OB-GYN
norm: southern illinois ob-gyn
Domain: wilsonelser.com

Name: Southern Illinois OB-GYN Associates, S.C.
norm: southern illinois ob gyn associates sc
Industry: Healthcarellm

Discovered: Nov 24, 2025
Materiality determined: —
Notification sent: May 19, 2026
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Data elements: Date of birth
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Immediately isolated the impacted environment
Worked with IT professionals and outside experts to secure and remediate the server
Engaged a third-party cybersecurity firm to conduct a comprehensive forensic investigation
Conducted a comprehensive and thorough review of the potentially impacted data
Implementing additional technical safeguards, enhanced security measures, and updated policies and procedures
Offering twelve-months of complimentary credit monitoring and identity theft restoration services
Provided guidance on how to better protect against identity theft and fraud
Changes made: Implementing additional technical safeguards
Enhanced security measures
Updated policies and procedures to mitigate against the risk of future issues
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(176 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

New Hampshire State AGMay 19 · first · this page

HHS OCR+3d

Illinois State AG+13d

Massachusetts State AG+17d

Pattern: first filing May 19 (NH), last Jun 5 (MA) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/southern-illinois-obgyn-20260519.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 19, 2026
Raw hash: 8e176baaef622343e58f6a160d4829e5e654db73d2c70cc948002b36c1b7e3a4

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySouthern Illinois OB-GYN

Victim entitySouthern Illinois OB-GYN Associates, S.C.

Incidentdiscovered Nov 24, 2025

Stated responseImmediately isolated the impacted environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov