PhysicalHealthcareHealthcareLossCustomer Data InvolvedIdentity (basic)Government IDEmploymentMediumActive

Cooper University Hospital

bd_c812864ff2dd0976 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 8, 2010

Filed

Sep 9, 2010

To disclose

9 weeks

Affected

2state residents only

Linked

2 filings

Confidence

65%

Cooper University Hospital reported the loss of a USB flash drive containing staff PII (SSN, names, contact info) on July 8, 2010. The drive was created on July 7, 2010. Two New Hampshire residents were affected. Notifications were sent on July 26, 2010, including credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 9 weeks / 63 days

Jul 7, 2010

Begins

Jul 8, 2010

Discovered

Sep 9, 2010

Filed

vs. sector median

4 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_97ae5eb68f617e822010-09-17 · +8dCandidate

Name: Cooper University Hospital
norm: cooper university hospital
Domain: cooperhealth.org

Name: Cooper University Hospital
norm: cooper university hospital
Domain: cooperhealth.org
Industry: Healthcarellm

Discovered: Jul 8, 2010
Breach occurred: Jul 7, 2010 – Jul 7, 2010
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jul 26, 2010
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified New Jersey state law enforcementNotified Camden Police DepartmentNotified New Hampshire Attorney General

During the incident: Notified New Jersey state law enforcement
Notified affected staff members
Provided credit monitoring and related identity protection services through Intelius
Provided identity theft consulting services from PricewaterhouseCoopers
Contacted the Camden Police Department and NJ State Police Cyber Crime Unit
Changes made: Implementing procedures to ensure that it does not happen again
Reinforcing and reeducating staff on the proper handling of PII
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(63 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGSep 9 · first · this page

Massachusetts State AG+8d

Pattern: first filing Sep 9 (NH), last Sep 17 (MA) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cooper-university-hospital-20100909.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 9, 2010
Raw hash: f480a9633392e5af80924e828aae5536a13fe4c397b0be6b6b9cf11a1707f4d1

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCooper University Hospital

Victim entityCooper University Hospital

Incidentdiscovered Jul 8, 2010

Stated responseNotified New Jersey state law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov