HackingTargetedIDENTITY_BASICHEALTH_BASICLowContained
Hawaii Radiological Associates, Ltd.
bd_ac76f16ddf5fb811 · schema v1 · pii pii-v1
Full breach record for Hawaii Radiological Associates, Ltd. →Hawaii Radiologic Associates, Ltd. notified consumers of a security incident where an unknown actor gained unauthorized access to systems between August 20-25, 2024. Suspicious activity was detected on August 26, 2024. Impacted data included names, dates of birth, health insurance subscriber IDs, and exam details. No evidence of misuse was found. The company reported the incident to federal law enforcement and is reviewing security protocols.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_493947217f3e4185Montana State AGfiled 2024-11-05(1d gap)Verified
- bd_7c8212cac55d6231Indiana State AGfiled 2024-10-25(12d gap)Verified
- bd_92887c3471c7cb06HHS OCRfiled 2024-10-25(12d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-11-06-hawaii-radiologic-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 6, 2024
- Raw hash
- 05a58461a8d66ec00f53e9376d921553aa3e03e94bbf1e4d354261c32e4679a0
Reporting entity
- Name
- Hawaii Radiological Associates, Ltd.norm: hawaii radiological associates
- Domain
- hirad.com
Victim entity
- Name
- Hawaii Radiological Associates, Ltd.norm: hawaii radiological associates
- Domain
- hirad.com
Incident
- Discovered
- Aug 26, 2024
- Materiality determined
- —
- Notification sent
- Nov 5, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Reported this event to federal law enforcementNotifying appropriate regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(72 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.