HackingStolen CredentialsTargetedIDENTITY_BASICHEALTH_BASICFINANCIAL_ACCOUNTLowContained
Lexington Medical Center
bd_b4dad9ce2b4c1bee · schema v1 · pii pii-v1
Full breach record for Lexington Medical Center →Lexington Medical Center notified Vermont AG of a data breach on Oct 4, 2023, where an unauthorized party accessed an employee email account and data drive. Forensic review revealed files containing names, DOBs, medical record numbers, and insurance IDs. No SSNs or electronic medical records were accessed. The incident is contained; no evidence of misuse found.
Vermont clock✗ VT AG >45 bday19 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-02-14-lexington-health-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2024
- Raw hash
- d0f70fccc78617aefa2554cd8cf37616d68af2246216eee299c07a20e78bc0d7
Reporting entity
- Name
- Lexington Medical Centernorm: lexington medical center
Victim entity
- Name
- Lexington Medical Centernorm: lexington medical center
Incident
- Discovered
- Oct 4, 2023
- Materiality determined
- —
- Notification sent
- Feb 14, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with the Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 19 weeks(133 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.