HackingStolen CredentialsData ExfiltratedTargetedPHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Mattapan Community Health Center, Inc.
bd_c45394c325d6e42d · schema v1 · pii pii-v1
Full breach record for Mattapan Community Health Center, Inc. →Community Health Center, Inc. (CHC), a federally qualified health center, notified the Maryland AG of a cybersecurity incident. On Jan 2, 2025, CHC detected unauthorized access by a sophisticated criminal actor who exfiltrated electronic health records and personal data (including SSNs) from its IT environment. Access was revoked within hours. 752 Maryland residents were affected. CHC retained forensic investigators, notified federal law enforcement, and sent notifications offering 24 months of identity theft prevention services.
Maryland clock✓ MD AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_23e0cf60b7f0d63eNew Hampshire State AGfiled 2025-01-30Verified
- bd_5ff62bff4e9d2059HHS OCRfiled 2025-01-30Verified
- bd_8c1d56e7ec667a72California State AGfiled 2025-01-30Verified
- bd_dc1672c896df3fb8Indiana State AGfiled 2025-01-30Verified
Show 2 more filings ↓Show fewer ↑up to 1d gap
- bd_e052c57184b93892Maine State AGfiled 2025-01-30Verified
- bd_2889d3f868c83b1cMontana State AGfiled 2025-01-31(1d gap)Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376267.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 30, 2025
- Raw hash
- 6c94e55e3cf378da6f1bfddb978e31ca9ab61a76373509653490276ab2871740
Reporting entity
- Name
- Joseph V. DeMarconorm: joseph v demarco
Victim entity
- Name
- Mattapan Community Health Center, Inc.norm: mattapan community health center
Incident
- Discovered
- Jan 2, 2025
- Materiality determined
- —
- Notification sent
- Jan 30, 2025
- Affected individuals
- 752
- Data types
- PHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 ChannelT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported the incident to federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- MD AG ≤30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.