MisusePrivilege AbuseCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
University of Nebraska Medical Center
bd_b35ddbb05f53fb90 · schema v1 · pii pii-v1
Full breach record for University of Nebraska Medical Center →Nebraska Medicine notified the New Hampshire Attorney General of an insider threat incident involving one NH resident. An employee accessed patient records outside job responsibilities between July 11, 2018, and October 1, 2019. The employee's access was terminated on October 2, 2019. The affected individual's demographic, government ID, and clinical data were viewed. Nebraska Medicine offered one year of credit monitoring and established a call center.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/nebraska-medicine-20191202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 2, 2019
- Raw hash
- 5cc1e511ed40d0fff824091fa8f188415c021c04ffc013b71f79962083ef7e16
Reporting entity
- Name
- BAKER & HOSTETLER LLPnorm: baker hostetler
Victim entity
- Name
- University of Nebraska Medical Centernorm: university of nebraska medical center
- Domain
- unmc.edu
Incident
- Discovered
- Oct 1, 2019
- Materiality determined
- —
- Notification sent
- Dec 2, 2019
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.