HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Sunflower Medical Group
bd_a789960305d766a8 · schema v1 · pii pii-v1
Full breach record for Sunflower Medical Group →Sunflower Medical Group, P.A. reported unauthorized access to its systems on or about December 15, 2024, detected on January 7, 2025. The incident affected 19 New Hampshire residents, exposing personal information including names and driver's license numbers. Sunflower engaged forensic investigators, enhanced security measures, and offered credit monitoring.
Leak gap clock⏱ Leak >30d9 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
A leak claim by rhysida about this victim predates this filing by 85 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_3d351c7dbcb8fcb4HHS OCRfiled 2025-03-07(3d gap)Verified
- bd_b09dbb58ef0fad22Maine State AGfiled 2025-03-07(3d gap)Candidate
- bd_df8e68de2fa41228Montana State AGfiled 2025-03-07(3d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/sunflower-medical-20250310.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 10, 2025
- Raw hash
- f172cab3d23df63be057431f29f5004b353d9c9ee1560517dd8d760fdf464ff0
Reporting entity
- Name
- Sunflower Medical Groupnorm: sunflower medical
- Domain
- sunflowermed.com
Victim entity
- Name
- Sunflower Medical Groupnorm: sunflower medical
- Domain
- sunflowermed.com
Incident
- Discovered
- Jan 7, 2025
- Materiality determined
- Feb 24, 2025
- Notification sent
- Mar 7, 2025
- Affected individuals
- 19
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Office of the Attorney General of the State of New Hampshire
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.