HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHighContained
SANTA BARBARA COTTAGE HOSPITAL FOUNDATION
bd_e21be11ad387c973 · schema v1 · pii pii-v1
Full breach record for SANTA BARBARA COTTAGE HOSPITAL FOUNDATION →Cottage Hospital notified the NH Attorney General of a breach affecting 1,138 NH residents. Unauthorized access occurred Oct 14-21, 2025; discovered Dec 8, 2025. Exposed data includes names, SSNs, driver's licenses, and bank account info. Notifications mailed Feb 6, 2026. Remediation includes credit monitoring and enhanced security measures.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_19e0e591936940d3Indiana State AGfiled 2026-02-06Verified
- bd_cbcabbbc7864f2f4Vermont State AGfiled 2026-02-06Verified
- bd_d149bc707a8e105fHHS OCRfiled 2026-02-06Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/cottage-hospital-20260206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 6, 2026
- Raw hash
- 406eb25f311a86fee7f956350ea3799bc57fd8e3b6fe9b4811adeec940c053c3
Reporting entity
- Name
- SANTA BARBARA COTTAGE HOSPITAL FOUNDATIONnorm: santa barbara cottage hospital
Victim entity
- Name
- SANTA BARBARA COTTAGE HOSPITAL FOUNDATIONnorm: santa barbara cottage hospital
Incident
- Discovered
- Dec 8, 2025
- Materiality determined
- —
- Notification sent
- Feb 6, 2026
- Affected individuals
- 1,138
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.