HackingHealthcareHealthcareStolen CredentialsTargetedIdentity (basic)Government IDMediumContained

Community Healthcare Network, Inc

bd_ce99eb40ad9a2561 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 1, 2023

Filed

Aug 28, 2024

To disclose

47 weeks

Affected

4state residents only

Linked

4 filings

Confidence

66%

Full breach record for Community Healthcare Network, Inc →3 incidents on file

Community Healthcare Network, Inc. notified Montana residents of a cybersecurity incident on October 1, 2023, where an unauthorized individual acquired personal information. The investigation concluded on June 21, 2024. Impacted data included names combined with government identifiers. The company engaged third-party specialists, secured its network, and provided credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 47 weeks / 332 days

Oct 1, 2023

Begins

Oct 1, 2023

Discovered

Aug 28, 2024

Filed

vs. sector median

+35 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Vermont State AGbd_1fd37ff4e54b3a392024-08-28Verified
Indiana State AGbd_cad7bf79f168c3202024-08-28Verified
Massachusetts State AGbd_7737bc050f25a0482024-08-29 · +1dVerified

Name: Community Healthcare Network, Inc
norm: community healthcare network

Name: Community Healthcare Network, Inc
norm: community healthcare network
Industry: Healthcarellm

Discovered: Oct 1, 2023
Breach occurred: Oct 1, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 21, 2024
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Immediately took steps to secure our network
Engaged third-party specialists to assist in an investigation
Conducted a thorough, time intensive review
Implemented additional technical safeguards
Changes made: Implemented additional technical safeguards to further enhance the security of information in our possession
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 47 weeks(332 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Vermont State AGAug 28 · first

Indiana State AGAug 28 · first

Montana State AGAug 28 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1636.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 28, 2024
Raw hash: 6bee0dfc3daaa620a00db4658cd3dc4b54ea22c345ae51120ca2df23667b5883

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCommunity Healthcare Network, Inc

Victim entityCommunity Healthcare Network, Inc

Incidentdiscovered Oct 1, 2023

Stated responseImmediately took steps to secure our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov