DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedGovernment IDIdentity (basic)HighContained

The New London Hospital Association, Inc.

bd_bd83cda4b293f69e · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 2, 2020

Filed

Mar 10, 2021

To disclose

14 weeks

Affected

30,056state residents only

Linked

7 filings

Confidence

66%
Full breach record for The New London Hospital Association, Inc.

The New London Hospital Association (NLH) notified the New Hampshire Attorney General of a data security incident involving unauthorized access to a single file via a VPN connection. The breach occurred on July 30, 2020, and was discovered by NLH on December 2, 2020. The file contained names and Social Security numbers of 30,056 New Hampshire residents. NLH engaged a cybersecurity firm, secured its systems, and began notifying affected individuals on March 9, 2021, offering one year of credit monitoring.

Incident timeline

undetected · 125 days
discovery → filing · 14 weeks / 98 days

Jul 30, 2020

Begins

Dec 2, 2020

Discovered

Mar 10, 2021

Filed

vs. sector median

+3 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Show 2 more filingsup to 68d gap

Filing propagation · 7 filings · 6 states

View merged incident ↗
Illinois State AGJan 1 · first
New Hampshire State AG+68d · this page

Pattern: first filing Jan 1 (IL), last Mar 10 (NH) — a 68-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.