HackingCapture Stored DataCapture App DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICMediumContained
North Shore Medical Labs
bd_ef05ae56631218c3 · schema v1 · pii pii-v1
Full breach record for North Shore Medical Labs →North Shore Medical Labs (NSML) disclosed a cybersecurity incident affecting approximately 8 New Hampshire residents. Unauthorized access to NSML computer systems occurred between December 19, 2022, and March 31, 2023. An actor copied patient-specific data, potentially including government IDs and health information. NSML discovered the incident on March 29, 2023, notified law enforcement and HHS, and sent notices to affected individuals on November 9, 2023. No identity theft has been confirmed.
Leak gap clock✗ Leak >180d32 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed8 affectedView incident
A leak claim by bianlian about this victim predates this filing by 182 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/north-shore-medical-labs-20231109.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 9, 2023
- Raw hash
- 1b97e36ff5da2fbe88cd85f44cba8d05a1a9b2d31e42aaede7f8cf6ae1f78ede
Reporting entity
- Name
- North Shore Medical Labsnorm: north shore medical labs
Victim entity
- Name
- North Shore Medical Labsnorm: north shore medical labs
Incident
- Discovered
- Mar 29, 2023
- Materiality determined
- —
- Notification sent
- Nov 9, 2023
- Affected individuals
- 8
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated CollectionT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement regarding the eventNotifying the U.S. Department of Health and Human Services (“HHS”)
Compliance
- Time to disclose
- 32 weeks(225 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.