Northeast Rehabilitation Hospital reports data breach
Learn More
The Northeast Rehabilitation Hospital Network (NRHN), based in Salem, New Hampshire, is reporting a ransomware attack. NRHN operates four acute rehab hospitals and 20 outpatient centers.
The attack occurred between May 13 and May 22, 2024, and was discovered by NRHN on May 22. Following the detection of the breach, NRHN secured their systems and launched an investigation to assess the impact. They subsequently filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights
The hacking group Hunters International claimed responsibility for the breach, stating on their data leak site on July 18 that they exfiltrated over 410 gigabytes of data comprising more than 352,000 files. The stolen data includes:
- Names
- Contact information
- Dates of birth
- Social Security numbers
- Driver’s license and state ID numbers
- Financial account information
- Medical diagnoses
- Treatment details
- Health insurance information
The number of affected individuals is not disclosed.
On July 19, 2024, and began notifying affected individuals with data breach notification letters, detailing the specific information compromised.
