HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIDENTITY_BASICHEALTH_BASICLowContained
THE CITADEL OF NORTHBROOK, LLC
bd_f3a586a1736ed1ba · schema v1 · pii pii-v1
Full breach record for THE CITADEL OF NORTHBROOK, LLC →Citadel of Northbrook notified the NH Attorney General of a data incident involving its EHR provider, PointClickCare. An unauthorized actor used compromised credentials to access limited patient information (names, health data) starting July 20, 2024. Citadel learned of the incident on Sept 26, 2024. One NH resident was affected. Notices offering credit monitoring were sent Nov 25, 2024.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_99b449fcc3e02900HHS OCRfiled 2024-11-25Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/citadel-northbrook-20241125.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 25, 2024
- Raw hash
- 5fb479f33f175f291f4842610fd34a174d82c7dd443192b624b8a479f4c4c56a
Reporting entity
- Name
- THE CITADEL OF NORTHBROOK, LLCnorm: the citadel of northbrook
Victim entity
- Name
- THE CITADEL OF NORTHBROOK, LLCnorm: the citadel of northbrook
Incident
- Discovered
- Sep 26, 2024
- Materiality determined
- —
- Notification sent
- Nov 25, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Office of the Attorney General Consumer Protection Bureau
- Third party
- via PointClickCare
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.