HackingStolen CredentialsCapture Stored DataCustomer Data InvolvedData ExfiltratedPHIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained

Meridian Internal Medicine, P.A.

bd_d3977ee6a0ceb88f · schema v1 · pii pii-v1

Full breach record for Meridian Internal Medicine, P.A. →

Meridian Internal Medicine, P.A., a healthcare revenue cycle management company, reported a cybersecurity incident discovered on March 18, 2024. An unauthorized actor accessed files and data within its network, compromising PHI and personal information of individuals. The company engaged a forensic firm, reset passwords, and offered credit monitoring. Two New Hampshire residents were identified as affected.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_6fd30a60bfe2800dHHS OCRfiled 2024-07-10(5d gap)Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/meridian-internal-medicine-20240705.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 5, 2024
Raw hash: bff8ad373f34ffb19e2b515afe31e724880ff79772568a1363bad45080997201

Reporting entity

Name: Meridian Internal Medicine, P.A.
norm: meridian internal medicine

Victim entity

Name: Meridian Internal Medicine, P.A.
norm: meridian internal medicine

Incident

Discovered: Mar 18, 2024
Materiality determined: May 22, 2024
Notification sent: Jul 5, 2024
Affected individuals: 2
Data types: PHIIDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

Compliance

Time to disclose: 16 weeks(109 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.