HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedData ExfiltratedPIIIdentity (basic)Government IDMediumContained

Weirton Medical Center

bd_c699b2812ddf97dd · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 18, 2024

To disclose

—

Affected

2state residents only

Linked

4 filings

Confidence

67%

Full breach record for Weirton Medical Center →

Weirton Medical Center notified New Hampshire and Rhode Island residents of a data security event affecting personal information. The organization notified federal law enforcement, HHS, and credit bureaus, and offered credit monitoring via Experian. The incident involved unauthorized access, likely via stolen credentials, resulting in the exposure of PII.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 18, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_5950138fad9624652024-03-18Verified
HHS OCRbd_c750b02f74e7035c2024-03-18Verified
Vermont State AGbd_fa0e49b3296f5af02024-03-18Verified

Name: Weirton Medical Center
norm: weirton medical center

Name: Weirton Medical Center
norm: weirton medical center
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Mar 18, 2024
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement regarding the eventProviding written notice of this incident to relevant state and federal regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnionNotifying the U.S. Department of Health and Human Services and prominent media pursuant to the Health Insurance Portability and Accountability Act (HIPAA)
Initial access: valid_credentials

During the incident: Notified federal law enforcement regarding the event
Providing access to credit monitoring services for through Experian, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state and federal regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Notifying the U.S. Department of Health and Human Services and prominent media pursuant to the Health Insurance Portability and Accountability Act (HIPAA)
Changes made: Working to implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGMar 18 · first

HHS OCRMar 18 · first

Vermont State AGMar 18 · first

New Hampshire State AGMar 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/weirton-medical-center-20240318.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 18, 2024
Raw hash: 33ded6982192026a0615ed109f52126801ced451d8d1e85dee26aba7be14cb97

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWeirton Medical Center

Victim entityWeirton Medical Center

IncidentUnauthorized Access

Stated responseNotified federal law enforcement regarding the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov