HackingDelayed DiscoveryIDENTITY_BASICLowContained
Dameron Hospital
bd_db0571f01a4096d2 · schema v1 · pii pii-v1
Full breach record for Dameron Hospital →Dameron Hospital notified Vermont AG of a data breach occurring Nov 4-5, 2023. Unauthorized access/acquisition of personal information (names) was determined on March 21, 2025. The hospital engaged external cybersecurity professionals and is offering credit monitoring services. No specific count of affected individuals was provided in the filing.
Leak gap clock✗ Leak >180d12 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by ransomhouse about this victim predates this filing by 476 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_59ac0f3e06125672California State AGfiled 2025-04-02Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-02-dameron-hospital-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 2, 2025
- Raw hash
- b8717a04f7f8325ec93ceed7a02131a492ff4a7397ad72f129eae4952ef39d40
Reporting entity
- Name
- Dameron Hospitalnorm: dameron hospital
- Domain
- dameronhospital.org
Victim entity
- Name
- Dameron Hospitalnorm: dameron hospital
- Domain
- dameronhospital.org
Incident
- Discovered
- Mar 21, 2025
- Materiality determined
- Mar 21, 2025
- Notification sent
- Apr 2, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with the Office of the Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 days(12 days from discovery to filing)
- Compliance flags
- Leak >180dVT AG ≤14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.