HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Watsonville Community Hospital
bd_af426c2c00d87771 · schema v1 · pii pii-v1
Full breach record for Watsonville Community Hospital →Watsonville Community Hospital notified the New Hampshire Attorney General of a data event affecting one NH resident. Unauthorized access occurred Nov 25-30, 2024; discovered Nov 29, 2024. Data included names, SSNs, and clinical info. WCH isolated systems, engaged forensic review, notified law enforcement, and provided 24 months of credit monitoring.
Leak gap clock✗ Leak >180d18 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
A leak claim by termite about this victim predates this filing by 530 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/watsonville-community-hospital-20260520.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 20, 2026
- Raw hash
- b5395258fe85f3df814af05669dbbb897d5b5bce8d71a7eca61b89e37b3d068c
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Watsonville Community Hospitalnorm: watsonville community hospital
- Domain
- watsonvillehospital.com
Incident
- Discovered
- Nov 29, 2024
- Materiality determined
- —
- Notification sent
- Dec 30, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- External
- Regulator citations
- provided preliminary notice to the U.S. Department of Health and Human Services (“HHS”) and prominent media pursuant to the Health Insurance Portability and Accountability Act (“HIPAA”)issued supplemental notice to HHS on October 15, 2025issued a second supplemental notice to HHS on May 20, 2026
Compliance
- Time to disclose
- 18 months(537 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.