HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSHEALTH_BASICPHIMediumContained
Heartland Health Center
bd_fba45e2f4449c4ea · schema v1 · pii pii-v1
Full breach record for Heartland Health Center →Heartland Health Center notified consumers of a data breach discovered on February 4, 2025, involving unauthorized access by an unknown third party. The incident exposed names, SSNs, DOBs, driver's license numbers, financial account numbers, usernames, and PHI including medical diagnoses and Medicare numbers. The organization engaged forensic consultants, secured systems, and offered 12 months of credit monitoring. No specific count of affected individuals was disclosed in the filing.
Vermont clock✗ VT AG >45 bday37 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 579 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_1ee456f0ab511bccLeak Sitemedusafiled 2025-02-24(238d gap)Candidate
Regulatory filings (3) · sorted by filing gap
- bd_647209df288b0fc3Montana State AGfiled 2025-10-21Verified
- bd_5f6155b7de4c7d60HHS OCRfiled 2025-10-17(4d gap)Verified
- bd_b8679ec8856a290aIndiana State AGfiled 2025-10-17(4d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-10-21-heartland-health-center-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 21, 2025
- Raw hash
- 8af1580619d427662edb9fbfe6e90b7606944201d3d64e22bdc190e067c09f8a
Reporting entity
- Name
- Heartland Health Centernorm: heartland health center
- Domain
- heartlandhealthcenter.org
Victim entity
- Name
- Heartland Health Centernorm: heartland health center
- Domain
- heartlandhealthcenter.org
Incident
- Discovered
- Feb 4, 2025
- Materiality determined
- —
- Notification sent
- Oct 17, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
Compliance
- Time to disclose
- 37 weeks(259 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.