DisclosureLens
HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedPHIIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Barlow Respiratory Hospital

bd_eee488eb88579f83 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 27, 2021

Filed

Dec 30, 2021

To disclose

18 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

65%
Full breach record for Barlow Respiratory Hospital

Barlow Respiratory Hospital notified patients of an incident where an unauthorized party accessed systems from August 21 to September 1, 2021. The incident was identified on August 27, 2021. The attacker removed files containing patient PHI, including names, SSNs, medical records, and financial info. The hospital engaged forensic investigators, notified law enforcement, and offered credit monitoring.

Incident timeline

undetected · 6 days
discovery → filing · 18 weeks / 125 days

Aug 21, 2021

Begins

Aug 27, 2021

Discovered

Dec 30, 2021

Filed

vs. sector median

+6 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 3 states

View merged incident ↗
Massachusetts State AGDec 30 · first
New Hampshire State AGDec 30 · first
HHS OCRDec 30 · first
California State AGDec 30 · first · this page

Pattern: first filing Dec 30 (MA), last Mar 4 (CA) — a 64-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.