HackingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
McKenzie Memorial Hospital
bd_aa5561ddf0b0a58f · schema v1 · pii pii-v1
Full breach record for McKenzie Memorial Hospital →McKenzie Memorial Hospital notified the NH AG of a data incident where an unauthorized actor accessed files between April 14-15, 2025. The breach affected 2 NH residents, exposing names, SSNs, and financial account info. The hospital engaged law enforcement and forensic specialists, secured the network, and offered 12 months of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_3cb138a829f15ef9Vermont State AGfiled 2025-07-24Verified
- bd_457ee2e873164bb4Maine State AGfiled 2025-07-24Verified
- bd_4cdd9242a38ba23fHHS OCRfiled 2025-07-24Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mckenzie-memorial-hospital-20250724.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 24, 2025
- Raw hash
- 7bf778f5f61f4ec5fe5a3a3105e7d3cc12ad872266a2a6c39839d78f8a6df43c
Reporting entity
- Name
- McKenzie Memorial Hospitalnorm: mckenzie memorial hospital
Victim entity
- Name
- McKenzie Memorial Hospitalnorm: mckenzie memorial hospital
Incident
- Discovered
- Apr 15, 2025
- Materiality determined
- Jun 19, 2025
- Notification sent
- Jul 24, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 weeks(100 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.