HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Public Health Management Corporation
bd_b5c251fb8a16298b · schema v1 · pii pii-v1
Full breach record for Public Health Management Corporation →Public Health Management Corporation (PHMC) notified consumers of a data breach involving unauthorized network access discovered on May 8, 2023. The incident potentially exposed personal information including names and government IDs. PHMC engaged forensic specialists, notified media, and offered credit monitoring services. No specific count of affected individuals was provided in the filing.
Vermont clock✗ VT AG >45 bday42 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by trigona about this victim predates this filing by 265 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_af10819349440b07New Hampshire State AGfiled 2024-02-26Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-02-26-public-health-management-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 26, 2024
- Raw hash
- 9b174302e0ea7f2ebdffeff4aa389a787f048cc997d4ba85e7873eae8e240b9f
Reporting entity
- Name
- Public Health Management Corporationnorm: public health management
- Domain
- phmc.org
Victim entity
- Name
- Public Health Management Corporationnorm: public health management
- Domain
- phmc.org
Incident
- Discovered
- May 8, 2023
- Materiality determined
- —
- Notification sent
- Jul 6, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- This notice has not been delayed by law enforcement.
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 42 weeks(294 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.