HackingHealthcareHealthcareDelayed DiscoveryIdentity (basic)LowContained

Dameron Hospital

bd_db0571f01a4096d2 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 21, 2025

Filed

Apr 2, 2025

To disclose

12 days

Affected

Not disclosed

Linked

9 records

Confidence

66%

Full breach record for Dameron Hospital →2 incidents on file

Dameron Hospital notified Vermont AG of a data breach occurring Nov 4-5, 2023. Unauthorized access/acquisition of personal information (names) was determined on March 21, 2025. The hospital engaged external cybersecurity professionals and is offering credit monitoring services. No specific count of affected individuals was provided in the filing.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d12 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 503 days

discovery → filing · 12 days

Nov 4, 2023

Begins

Mar 21, 2025

Discovered

Apr 2, 2025

Filed

vs. sector median

7 wks faster

This filing is one of 9 records about the same incident.View merged incident

A leak claim by ransomhouse about this victim was first seen 476 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteransomhousebd_8f9a7248d821619c2023-12-13 · +476dVerified by operator

Regulatory filings (6) · sorted by filing gap

HHS OCRbd_36c97bfb1e2491ba2025-04-02Verified by operator
California State AGbd_59ac0f3e061256722025-04-02Verified by operator
Montana State AGbd_78bee24c50a0bf152025-04-02Verified by operator
Indiana State AGbd_c59278804a53d6142025-04-02Verified by operator

Show 2 more filings ↓up to 1d gap

Massachusetts State AGbd_e35f6f18fda15ad82025-04-02Verified by operator
Illinois State AGbd_64809bc52fb8829c2025-04-01 · +1dVerified by operator

Press reports (1)

Pressransomhousebd_c5636cceee8c69592023-12-05 · +484dCandidate

Name: Dameron Hospital
norm: dameron hospital
Domain: dameronhospital.org

Name: Dameron Hospital
norm: dameron hospital
Domain: dameronhospital.org
Industry: Healthcarellm

Discovered: Mar 21, 2025
Breach occurred: Nov 4, 2023 – Nov 5, 2023
Undetected for: 503 daysoccurrence → discovery
Materiality determined: Mar 21, 2025
Notification sent: Apr 2, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Filed notice with the Office of the Vermont Attorney General
Initial access: valid_credentials

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Offering a complimentary membership of Experian IdentityWorksSM Credit 3B
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 days(12 days from discovery to filing)
Compliance flags: Leak >180dClock withheld · confirmation date

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Illinois State AGApr 1 · first

HHS OCR+1d

California State AG+1d

Montana State AG+1d

Indiana State AG+1d

Massachusetts State AG+1d

Vermont State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-04-02-dameron-hospital-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 2, 2025
Raw hash: b8717a04f7f8325ec93ceed7a02131a492ff4a7397ad72f129eae4952ef39d40

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Press reports (1)

Reporting entityDameron Hospital

Victim entityDameron Hospital

Incidentdiscovered Mar 21, 2025

Stated responseCommenced a prompt and thorough investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov