MisuseHealthcareHealthcarePrivilege AbuseEmployee Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

BEAUMONT HEALTH

bd_dc39c618c5207449 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 10, 2019

Filed

Jan 27, 2020

To disclose

7 weeks

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for BEAUMONT HEALTH →5 incidents on file

Beaumont Health notified the NH Attorney General of an insider incident where a former employee accessed patient PHI without authorization on Dec 10, 2019. One NH resident's data (name, SSN, DOB, medical info) was accessed. The employee was terminated. Beaumont offered 12 months of credit monitoring and notified the individual on Jan 24, 2020.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 48 days

Dec 10, 2019

Discovered

Jan 27, 2020

Filed

vs. sector median

5 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_429316ba97615a372020-01-24 · +3dVerified
Illinois State AGbd_201b8022acb4b11b2020-01-01 · +26dVerified

Name: BEAUMONT HEALTH
norm: beaumont health

Name: BEAUMONT HEALTH
norm: beaumont health
Industry: Healthcarellm

Discovered: Dec 10, 2019
Materiality determined: —
Notification sent: Jan 24, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Notified New Hampshire Attorney General
Initial access: insider_action

During the incident: Commenced a prompt and very thorough investigation
Worked closely with external cybersecurity professionals
Worked closely with the State of Michigan's Attorney Grievance Commission
Provided written notification to the affected resident
Offered twelve months of complimentary credit monitoring
Terminated the employee responsible for the incident
Changes made: Continuously evaluates practices and internal controls to enhance security and privacy
Will make changes as necessary
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(48 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Illinois State AGJan 1 · first

HHS OCR+23d

New Hampshire State AG+26d · this page

Pattern: first filing Jan 1 (IL), last Jan 27 (NH) — a 26-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/beaumont-health-20200127.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 27, 2020
Raw hash: 1d077040052c58e6dedf84b2ca45ca114fc7d9db24a6492882d6dcf3c9d75dc1

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityBEAUMONT HEALTH

Victim entityBEAUMONT HEALTH

Incidentdiscovered Dec 10, 2019

Stated responseCommenced a prompt and very thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov