PhysicalHealthcareHealthcareLossCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumResolved

Mental Health Center for Southern New Hampshire Inc

bd_e74f78044f5a0cbe · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 29, 2016

Filed

Jan 19, 2017

To disclose

7 weeks

Affected

66state residents only

Confidence

66%

Full breach record for Mental Health Center for Southern New Hampshire Inc →3 incidents on file

Center for Mental Health notified Montana residents that a document containing names, SSNs, DOBs, and limited health info was lost by an employee during a medication delivery in Nov 2016. The document was found by a child and returned to police. The company offered 12 months of identity protection.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 51 days

Nov 29, 2016

Discovered

Jan 19, 2017

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed66 affectedView incident

Name: Mental Health Center for Southern New Hampshire Inc
norm: mental health center for southern new hampshire
Domain: center4mh.org

Name: Mental Health Center for Southern New Hampshire Inc
norm: mental health center for southern new hampshire
Domain: center4mh.org
Industry: Healthcarellm

Discovered: Nov 29, 2016
Materiality determined: —
Notification sent: Jan 19, 2017
Affected individuals: 66state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium

During the incident: Conducted an investigation into how the list could have been lost
Arranged to have AllClear ID protect your identity for 12 months at no cost
Changes made: Retraining employees
Reviewing policies and procedures to minimize risk
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(51 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Center-for-Mental-Health.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 19, 2017
Raw hash: 7180979b15a2113edb285633f049e8ff1245854ff6beb1944f11b3a5227a93ac

Reporting entityMental Health Center for Southern New Hampshire Inc

Victim entityMental Health Center for Southern New Hampshire Inc

Incidentdiscovered Nov 29, 2016

Stated responseConducted an investigation into how the list could have been lost

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov