HackingHealthcareHealthcareStolen CredentialsDelayed DiscoveryIdentity (basic)Health (basic)Financial accountLowContained

Medical Center Barbour

bd_abe1369e79662a52 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 29, 2023

Filed

Oct 1, 2024

To disclose

48 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

67%

Full breach record for Medical Center Barbour →2 incidents on file

Medical Center Barbour notified consumers of a data breach detected on October 29, 2023. Unauthorized actors accessed files containing dates of birth, medical information, and health insurance information. The organization engaged forensic investigators and deployed additional monitoring. Affected individuals were offered 12 months of credit monitoring services.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday48 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 48 weeks / 338 days

Oct 29, 2023

Discovered

Oct 1, 2024

Filed

vs. sector median

+36 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_db23b92bd8c520862024-10-01Verified
New Hampshire State AGbd_97a1b4b6e8540c6f2024-10-07 · +6dVerified
New Hampshire State AGbd_02b2c61ce6f7780a2024-08-28 · +34dVerified
Indiana State AGbd_317621c0d61a56982024-08-22 · +40dVerified

Show 2 more filings ↓up to 40d gap

Maine State AGbd_5c74f1ce71898c8f2024-08-22 · +40dCandidate
Massachusetts State AGbd_9cdd6cade1661cd52024-08-22 · +40dVerified

Name: Medical Center Barbour
norm: medical center barbour

Name: Medical Center Barbour
norm: medical center barbour
Industry: Healthcarellm

Discovered: Oct 29, 2023
Materiality determined: —
Notification sent: Oct 1, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Health (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged a specialized cybersecurity firm to investigate the nature and scope of the incident
Retained a leading forensic investigation firm who assisted in conducting an investigation and confirming the security of our network environment
Deployed additional monitoring tools
Enhance the security of our systems
Changes made: Deployed additional monitoring tools
Enhance the security of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 48 weeks(338 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Indiana State AGAug 22 · first

Maine State AGAug 22 · first

Massachusetts State AGAug 22 · first

New Hampshire State AG+6d

Maine State AG+40d

Vermont State AG+40d · this page

New Hampshire State AG+46d

Pattern: first filing Aug 22 (IN), last Oct 7 (NH) — a 46-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-10-01-medical-center-barbour-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2024
Raw hash: 453b52ae4b12289febe148547f5d9b5a6a958205b597691d0003eac8aad9d94f

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMedical Center Barbour

Victim entityMedical Center Barbour

Incidentdiscovered Oct 29, 2023

Stated responseEngaged a specialized cybersecurity firm to investigate the nature and scope of the incident

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov