HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedPIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Western Montana Mental Health Center
bd_c165bdbada433eae · schema v1 · pii pii-v1
Full breach record for Western Montana Mental Health Center →Western Montana Mental Health reported a data breach affecting 12 New Hampshire residents. Discovered on September 15, 2024, unauthorized access to files containing PII and PHI occurred. The organization engaged forensic experts, notified the FBI, and provided 12 months of identity protection services to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_154ae35704eb4331Maine State AGfiled 2025-07-18Verified by operator
- bd_302a8478f032d5e0Montana State AGfiled 2025-07-17(1d gap)Candidate
- bd_48f24baf2ecae00eVermont State AGfiled 2025-07-17(1d gap)Verified
- bd_6ec13e1ebb9b4d08Indiana State AGfiled 2025-07-17(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/western-montana-mental-health-20250718.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 18, 2025
- Raw hash
- d096f10a113eafa94ce53d2d92fdfbac8c3adf182454b4c08080483569e210df
Reporting entity
- Name
- Western Montana Mental Health Centernorm: western montana mental health center
Victim entity
- Name
- Western Montana Mental Health Centernorm: western montana mental health center
Incident
- Discovered
- Sep 15, 2024
- Materiality determined
- May 27, 2025
- Notification sent
- Jul 17, 2025
- Affected individuals
- 12
- Data types
- PIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 44 weeks(306 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.