Social EngineeringPhishingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
McKenzie County Healthcare System, Inc.
bd_f4e88d007ea9a5b1 · schema v1 · pii pii-v1
Full breach record for McKenzie County Healthcare System, Inc. →McKenzie County Healthcare Systems, Inc. notified New Hampshire residents of a phishing incident involving an employee email account. Unauthorized access occurred between October 2-4, 2023, discovered on October 5, 2023. One NH resident was notified on April 10, 2024. Affected data includes names, addresses, and government IDs. The organization provided credit monitoring via Experian and implemented additional security safeguards.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_47a2ebba1576c394Vermont State AGfiled 2024-04-10Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mckenzie-county-healthcare-systems-20240410.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 10, 2024
- Raw hash
- 454e5ba817d74cb30605e36b7e959720f8bd76c2200b74f063aae52d29a2a7c2
Reporting entity
- Name
- McKenzie County Healthcare System, Inc.norm: mckenzie county healthcare system
Victim entity
- Name
- McKenzie County Healthcare System, Inc.norm: mckenzie county healthcare system
Incident
- Discovered
- Oct 5, 2023
- Materiality determined
- —
- Notification sent
- Apr 10, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Provided written notice of this incident to relevant state and federal regulatorsNotifying the U.S. Department of Health and Human Services and prominent media pursuant to the Health Insurance Portability and Accountability Act (HIPAA)
- Initial access
- phishing_link
Compliance
- Time to disclose
- 27 weeks(188 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.