Social EngineeringHealthcareHealthcarePhishingStolen CredentialsEmployee Data InvolvedIdentity (basic)Financial accountGovernment IDMediumActive

Dartmouth-Hitchcock Medical Center

bd_e6de34277d16e3c7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 23, 2014

Filed

Jan 28, 2015

To disclose

—

Affected

Confidence

65%

Full breach record for Dartmouth-Hitchcock Medical Center →3 incidents on file

Dartmouth-Hitchcock Medical Center notified the NH Attorney General of a phishing incident affecting one NH resident. On Nov 23, 2014, an employee account was compromised via phishing, leading to unauthorized access to the payroll system for approximately one hour. Compromised data included full names, bank account routing/checking numbers, and the last 4 digits of SSNs. The organization offered credit monitoring and advised monitoring of financial statements. Investigation was ongoing at the time of filing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 66 days

Nov 23, 2014

Begins

Nov 23, 2014

Discovered

Jan 28, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Dartmouth-Hitchcock Medical Center
norm: dartmouth hitchcock medical center

Name: Dartmouth-Hitchcock Medical Center
norm: dartmouth hitchcock medical center
Industry: Healthcarellm

Discovered: Nov 23, 2014
Breach occurred: Nov 23, 2014
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 29, 2014
Affected individuals: 1state + nationwide
Data types: Identity (basic)Financial accountGovernment ID
Attack vector: Phishing
MITRE ATT&CK: T1566 PhishingT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General Michael A. Delaney
Initial access: phishing_link

During the incident: Commenced an investigation of the incident
Provided the New Hampshire resident with written notice
Advised the residents to monitor all credit reports and bank statements
Offered a complimentary one-year membership in Experian’s ProtectMyID to all affected residents
Providing a direct telephone number for additional support
Advised the individuals affected to obtain a credit report and the process for placing a fraud alert on their credit files
Requiring that affected employees change their passwords
Continues to monitor system activity
Implemented further security awareness for employees
Evaluating additional technical safeguards
Changes made: Requiring that affected employees change their passwords
Implemented further security awareness for employees
Evaluating additional technical safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/dartmouth-hitchcock-20150210.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 28, 2015
Raw hash: bd4d614a971822de3321ea3c335faa31dbc4b759c53facce7b99541e7898fe06

Reporting entityDartmouth-Hitchcock Medical Center

Victim entityDartmouth-Hitchcock Medical Center

Incidentdiscovered Nov 23, 2014

Stated responseCommenced an investigation of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov