PhysicalHealthcareHealthcareTheftCustomer Data InvolvedTargetedPHIIdentity (basic)Government IDMediumContained

Elliot Health System

bd_e7b55310da8a8fd2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 6, 2008

Filed

Mar 3, 2008

To disclose

—

Affected

6state residents only

Confidence

66%

Full breach record for Elliot Health System →4 incidents on file

Elliot Health System reported a security breach to the NH Attorney General after a business associate, Advanced Medical Partners, Inc., reported the theft of ten computers on February 22, 2008. The computers contained PHI of up to 6 patients, including names, dates of service, insurance info, and DOB. EHS notified patients on March 13, 2008.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 13 days

discovery → filing · ≤1 day / 0 days

Feb 22, 2008

Begins

Mar 6, 2008

Discovered

Mar 3, 2008

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6 affectedView incident

Name: Elliot Health System
norm: elliot health system
Domain: elliothospital.org

Name: Elliot Health System
norm: elliot health system
Domain: elliothospital.org
Industry: Healthcarellm

Discovered: Mar 6, 2008
Breach occurred: Feb 22, 2008 – Feb 22, 2008
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 13, 2008
Affected individuals: 6state-resident count only
Data types: PHIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Disclosed security breach to New Hampshire Attorney General's Office under RSA 359-C:20

During the incident: Reviewed situation as an opportunity to evaluate current practices, policies and procedures
Sent written notice to affected patients
Changes made: Evaluated current practices, policies and procedures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/elliot-health-20080303.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 3, 2008
Raw hash: 987a4d8b471cf09043c7980be742493dd50d77b754b53ab83b8842fb21c220de

Reporting entityElliot Health System

Victim entityElliot Health System

Incidentdiscovered Mar 6, 2008

Stated responseReviewed situation as an opportunity to evaluate current practices, policies and procedures

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov