Social EngineeringHealthcareHealthcarePhishingStolen CredentialsEmployee Data InvolvedIdentity (basic)Financial accountGovernment IDMediumActive

Dartmouth-Hitchcock Medical Center

bd_de38b9b81958a376 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 23, 2014

Filed

Jan 28, 2015

To disclose

9 weeks

Affected

Confidence

65%

Full breach record for Dartmouth-Hitchcock Medical Center →3 incidents on file

Dartmouth-Hitchcock notified the NH Attorney General of a phishing incident affecting one NH resident. On Nov 23, 2014, an employee account was compromised via phishing, leading to unauthorized access to the payroll system. Full names, bank account numbers, and the last 4 digits of SSNs were exposed. The organization is offering credit monitoring and has implemented password resets and security awareness training.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 66 days

Nov 23, 2014

Begins

Nov 23, 2014

Discovered

Jan 28, 2015

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Dartmouth-Hitchcock Medical Center
norm: dartmouth hitchcock medical center

Name: Dartmouth-Hitchcock Medical Center
norm: dartmouth hitchcock medical center
Industry: Healthcarellm

Discovered: Nov 23, 2014
Breach occurred: Nov 23, 2014
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 29, 2014
Affected individuals: 1state + nationwide
Data types: Identity (basic)Financial accountGovernment ID
Attack vector: Phishing
MITRE ATT&CK: T1566 PhishingT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General Michael A. Delaney
Initial access: phishing_link

During the incident: Commenced an investigation of the incident
Provided the New Hampshire resident with written notice
Advised the residents to monitor all credit reports and bank statements
Offered a complimentary one-year membership in Experian’s ProtectMyID
Providing a direct telephone number for additional support
Advised the individuals affected to obtain a credit report and the process for placing a fraud alert on their credit files
Changes made: Requiring that they change their passwords
Continues to monitor system activity
Implemented further security awareness for employees
Evaluating additional technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(66 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/dartmouth-hitchcock-20150128.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 28, 2015
Raw hash: 0b2d1532f89a97d06ee5e56f8281bd2cd1bd4a569459ae8de18d135673b10351

Reporting entityDartmouth-Hitchcock Medical Center

Victim entityDartmouth-Hitchcock Medical Center

Incidentdiscovered Nov 23, 2014

Stated responseCommenced an investigation of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov