HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPIIMediumContained
Hendry County Hospital Authority
bd_f8877c4a794b8b26 · schema v1 · pii pii-v1
Full breach record for Hendry County Hospital Authority →Hendry Regional Medical Center (HRMC), a 25-bed critical access hospital in Florida, notified consumers of a cybersecurity incident detected on August 25, 2022. An unauthorized third party gained temporary access to HRMC's network, potentially exposing patient data including names, addresses, DOBs, SSNs, medical info, and phone numbers. HRMC engaged external IT specialists, secured the network, and offered 12 months of credit monitoring. Notification was sent March 12, 2024.
Vermont clock✗ VT AG >45 bday19 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-03-12-hendry-regional-medical-center-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 12, 2024
- Raw hash
- 149ed5baa39d397541e83f4d8ba79f84ab3249a47de00b34e9a08527f2233b56
Reporting entity
- Name
- Hendry Regional Medical Centernorm: hendry regional medical center
Victim entity
- Name
- Hendry County Hospital Authoritynorm: hendry county hospital authority
Incident
- Discovered
- Aug 25, 2022
- Materiality determined
- —
- Notification sent
- Mar 12, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 19 months(565 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.