Montana Department of Public Health & Human Services
ent_8a39a0c1c5cc03997be87f81
Disclosures
2
HHS OCR · State AG · 2 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
1,300,000
nationwide · State AG NH
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Montana Department of Public Health & Human Services
- Normalized
- montana department of public health human— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- MONTANAHHS OCRas victim2014-07-07
Montana Department of Public Health and Human Services reported to HHS on 2014-07-07 a Hacking/IT Incident affecting 1,062,509 individuals. Breached information located on a Network Server. The incident involved an undetected and unpatched application code vulnerability exploited for approximately 9 months, exposing demographic, clinical, and/or financial information. Upon discovery, the server was taken offline, law enforcement was notified, a forensics investigation was conducted, and OCR provided technical assistance. Credit monitoring was offered to affected individuals.
- ⛰️New Hampshire State AGas victim2014-06-23
Montana Department of Public Health and Human Services notified the New Hampshire Attorney General regarding a breach affecting approximately 1.3 million individuals. Hackers gained access to a server in June 2013 and remained undetected until May 15, 2014. The incident involved malware that encrypted data and exfiltrated PHI, including diagnoses, prescriptions, SSNs, and financial account numbers. The agency shut down the server, upgraded security, and offered credit monitoring.