HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICCREDENTIALSFINANCIAL_ACCOUNTMediumContained
Wood River Health
bd_cd42262f82547320 · schema v1 · pii pii-v1
Full breach record for Wood River Health →Wood River Health notified the New Hampshire AG of a data security incident affecting an employee email account. Unauthorized access occurred between August 8 and September 6, 2024, exposing patient names, SSNs, medical records, and credentials. 39 NH residents were notified on July 28, 2025. The company engaged investigators, notified law enforcement, and provided 12 months of credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d1b6303b8b44d7c4Indiana State AGfiled 2025-07-28Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/wood-river-health-20250728.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 28, 2025
- Raw hash
- 8b616ab8810a07621801ea43f654125d2948f262f16b14fc32b130ece38e97df
Reporting entity
- Name
- Wood River Healthnorm: wood river health
Victim entity
- Name
- Wood River Healthnorm: wood river health
Incident
- Discovered
- Sep 6, 2024
- Materiality determined
- May 29, 2025
- Notification sent
- Jul 28, 2025
- Affected individuals
- 39
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICCREDENTIALSFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement regarding the eventproviding written notice of this incident to relevant state and federal regulators, as necessary, and to the three major credit reporting agencies
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 46 weeks(325 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.