HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPHIMediumContained

Oradell Animal Hospital

bd_a92122618dbd5709 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 16, 2023

Filed

Dec 26, 2023

To disclose

6 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

67%

Full breach record for Oradell Animal Hospital →2 incidents on file

Oradell Animal Hospital, Inc. notified consumers of a data breach detected on November 16, 2023. An unauthorized actor accessed patient data including names, addresses, DOBs, SSNs, financial account info, and health insurance info. The hospital engaged forensic investigators, enhanced security monitoring, and offered 12 months of credit monitoring services.

J jump to incidentP pin to compareR raw source

Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 6 weeks / 40 days

Nov 16, 2023

Discovered

Dec 26, 2023

Filed

vs. sector median

7 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_17da0399ca12cec92023-12-27 · +1dVerified
Maine State AGbd_9847d140fadb4f792023-12-27 · +1dCandidate
New Hampshire State AGbd_b788ab46df5cb2602023-12-27 · +1dVerified

Name: Oradell Animal Hospital
norm: oradell animal hospital

Name: Oradell Animal Hospital
norm: oradell animal hospital
Industry: Healthcarellm

Discovered: Nov 16, 2023
Materiality determined: —
Notification sent: Dec 26, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged a specialized cybersecurity firm to investigate the nature and scope of the incident
Retained a leading forensic investigation firm who assisted in conducting an investigation and confirming the security of our network environment
Deployed additional monitoring tools
Will continue to enhance the security of our systems
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance
Changes made: Deployed additional monitoring tools
Will continue to enhance the security of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: VT AG >14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Vermont State AGDec 26 · first · this page

Massachusetts State AG+1d

Maine State AG+1d

New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-12-26-oradell-animal-hospital-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 26, 2023
Raw hash: 0013ddcbf000c9e1d8fb2730b091ccb5c0b3577f52163cf00cfabc54ae8048d2

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityOradell Animal Hospital

Victim entityOradell Animal Hospital

Incidentdiscovered Nov 16, 2023

Stated responseEngaged a specialized cybersecurity firm to investigate the nature and scope of the incident

ComplianceVT AG >14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov