HackingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Public Health Management Corporation
bd_af10819349440b07 · schema v1 · pii pii-v1
Full breach record for Public Health Management Corporation →Public Health Management Corporation (PHMC) notified New Hampshire residents of a data breach discovered on May 8, 2023. Unauthorized access to PHMC's network exposed personal information, including Social Security numbers, of 9 New Hampshire residents and approximately 12 Rhode Island residents. PHMC engaged forensic specialists, notified law enforcement, and offered credit monitoring services to affected individuals.
Leak gap clock✗ Leak >180d42 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
A leak claim by trigona about this victim predates this filing by 265 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_b5c251fb8a16298bVermont State AGfiled 2024-02-26Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/public-health-management-corporation-20240226.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 26, 2024
- Raw hash
- 9df187c68a304d42b3504e5ff11b542ef978088916e5f216df93dc3aad7823ca
Reporting entity
- Name
- Public Health Management Corporationnorm: public health management
- Domain
- phmc.org
Victim entity
- Name
- Public Health Management Corporationnorm: public health management
- Domain
- phmc.org
Incident
- Discovered
- May 8, 2023
- Materiality determined
- Dec 20, 2023
- Notification sent
- Jul 6, 2023
- Affected individuals
- 9
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- notified federal law enforcementproviding written notice of this incident to relevant state and federal regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 42 weeks(294 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.