HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedData ExfiltratedPIIPHIIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Western Montana Mental Health Center

bd_c165bdbada433eae · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 15, 2024

Filed

Jul 18, 2025

To disclose

44 weeks

Affected

12state residents only

Linked

7 filings

Confidence

66%

Full breach record for Western Montana Mental Health Center →2 incidents on file

Western Montana Mental Health reported a data breach affecting 12 New Hampshire residents. Discovered on September 15, 2024, unauthorized access to files containing PII and PHI occurred. The organization engaged forensic experts, notified the FBI, and provided 12 months of identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 44 weeks / 306 days

Sep 15, 2024

Discovered

May 27, 2025

Scope determined

Jul 18, 2025

Filed

vs. sector median

+35 wks slower

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_154ae35704eb43312025-07-18Verified by operator
Massachusetts State AGbd_67a72bd7f639a7b72025-07-18Verified
Montana State AGbd_302a8478f032d5e02025-07-17 · +1dCandidate
Nebraska State AGbd_3e621ed6b0cebeef2025-07-17 · +1dVerified

Show 2 more filings ↓up to 1d gap

Vermont State AGbd_48f24baf2ecae00e2025-07-17 · +1dVerified
Indiana State AGbd_6ec13e1ebb9b4d082025-07-17 · +1dVerified

Name: Western Montana Mental Health Center
norm: western montana mental health center

Name: Western Montana Mental Health Center
norm: western montana mental health center
Industry: Healthcarellm

Discovered: Sep 15, 2024
Materiality determined: May 27, 2025
Notification sent: Jul 17, 2025
Affected individuals: 12state-resident count only
Data types: PIIPHIIdentity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Retained cybersecurity experts and launched a forensics investigation
Implemented additional security measures to further harden its digital environment
Notified the Federal Bureau of Investigation and will cooperate with any resulting investigation
Offered 12 months of complimentary identity protection services through IDX
Changes made: Implemented additional security measures to further harden its digital environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 44 weeks(306 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGJul 17 · first

Nebraska State AGJul 17 · first

Vermont State AGJul 17 · first

Indiana State AGJul 17 · first

Maine State AG+1d

Massachusetts State AG+1d

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/western-montana-mental-health-20250718.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 18, 2025
Raw hash: d096f10a113eafa94ce53d2d92fdfbac8c3adf182454b4c08080483569e210df

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityWestern Montana Mental Health Center

Victim entityWestern Montana Mental Health Center

Incidentdiscovered Sep 15, 2024

Stated responseRetained cybersecurity experts and launched a forensics investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov