HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTPIIHighContained
AKUMIN OPERATING CORP.
bd_ee2355bc545555b4 · schema v1 · pii pii-v1
Full breach record for AKUMIN OPERATING CORP. →Akumin, Inc. notified New Hampshire residents of a data breach involving unauthorized access to patient information. The incident, first identified in October 2023, resulted in the exposure of personal and government-issued identifiers. Akumin isolated its network, rebuilt systems, and notified federal and state regulators. Approximately 15,438 NH residents were affected.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_31930fb683ccf8b8Montana State AGfiled 2024-12-23Candidate
- bd_647223fbc4b0f6c6Indiana State AGfiled 2024-12-23Verified
- bd_db7efd6c0c4d9e1aCalifornia State AGfiled 2024-12-23Verified
- bd_e16c383f2f31d772Washington State AGfiled 2024-12-23Verified
Show 1 more filing ↓Show fewer ↑
- bd_eb1cfb9c9e6261dcVermont State AGfiled 2024-12-23Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/akumin-20241223.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 23, 2024
- Raw hash
- 68d9988c5cd5946d69744d5145f158c26069c8530835be2d9d29e3a7c5cc647f
Reporting entity
- Name
- AKUMIN OPERATING CORP.norm: akumin operating
Victim entity
- Name
- AKUMIN OPERATING CORP.norm: akumin operating
Incident
- Discovered
- Oct 12, 2023
- Materiality determined
- —
- Notification sent
- Dec 29, 2023
- Affected individuals
- 15,438
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Securities Exchange CommissionNotified the U.S. Department of Health and Human ServicesIssued supplemental notification to HHSProvided notifications to the Office of the Attorney General in Connecticut, Illinois, Massachusetts, Montana, Nebraska, and New YorkNotified the Consumer Reporting Agencies
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 months(438 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.