Capital Region Medical Center

Capital Region Medical Center (CRMC) notified the New Hampshire Attorney General of a cybersecurity incident on March 25, 2022. The incident occurred on December 17, 2021, when an unauthorized third party gained access to files containing personal and health information of 4 New Hampshire residents. Data exposed included names, DOB, addresses, medical info, SSNs, and driver's license numbers. CRMC disabled its network, engaged forensic and data review firms, and notified law enforcement. Credit monitoring was offered to affected individuals.

Capital Region Medical Center, a healthcare organization, reported an external system breach (hacking) that occurred on December 17, 2021, and was discovered on December 24, 2021. The breach affected 7 Maine residents, involving the acquisition of names combined with driver's license or non-driver identification card numbers. The center began notifying affected individuals on March 24, 2022, and offered one year of complimentary credit monitoring services through Experian.

Capital Region Medical Center reported a data breach to the Montana Attorney General. The breach was reported on 2022-03-25. The breach occurred on 12/17/2021. 2 Montana residents were affected.

Capital Region Medical Center (Jefferson City, MO) reported to HHS OCR on 2022-03-11 a ransomware incident affecting 17,578 individuals. Breached information was located on a network server and included names, addresses, dates of birth, driver's license numbers, Social Security numbers, medical diagnoses/conditions, and other treatment information. The CE notified HHS, affected individuals, and the media, posted substitute notice, and implemented additional administrative, technical, and security safeguards, including staff retraining.