MalwareRansomwareRansomHubRansom DemandedData ExfiltratedTargetedIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASICMediumContained
Methodist Homes of Alabama and Northwest Florida
bd_ac7b475d1e12c114 · schema v1 · pii pii-v1
Full breach record for Methodist Homes of Alabama and Northwest Florida →Methodist Homes of Alabama & Northwest Florida disclosed a ransomware attack attributed to RansomHub. The incident occurred between Oct 2-14, 2024, and was discovered on Oct 14, 2024. Data accessed included SSNs, driver's licenses, financial account numbers, and PHI. One New Hampshire resident was identified. The organization engaged forensic investigators, notified law enforcement and HHS OCR, and offered credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_304479b13e54a1fdMaine State AGfiled 2025-10-07Candidate
- bd_42fe0c2d23c77a22Indiana State AGfiled 2025-10-03(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/methodist-homes-alabama-northwest-florida-20251007.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 7, 2025
- Raw hash
- 04dd56b37c175fac5cd8cf44647775dc22e02a6b55e964c0ce639596b16b21cf
Reporting entity
- Name
- Kennedys CMK LLPnorm: kennedys cmk
Victim entity
- Name
- Methodist Homes of Alabama and Northwest Floridanorm: methodist homes of alabama and northwest florida
Incident
- Discovered
- Oct 14, 2024
- Materiality determined
- —
- Notification sent
- Oct 3, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASIC
- Attack vector
- Ransomware· RansomHub
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- RansomHubExternalFinancial
- Regulator citations
- Notified federal law enforcementNotified the Department of Health and Human Services, Office for Civil Rights
Compliance
- Time to disclose
- 51 weeks(358 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.