Seneca Nation Health System
incransomThis record tracks a ransomware attack claimed by the incransom group against Seneca Nation Health System. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
The Seneca Nation Health System (SNHS) is recognized as a non-profit public health organization and maintains a federal contract with the Indian Health services (IHS) under public health law 93-368 Title 1. The SNHS was established in 1976 as a tribal program and has continuously provided ambulatory health care in the Allegany and Cattaraugus Territories. The health care facilities offer programs developed under the public health model. These facilities are the Lionel R. John Health Center (LRJHC), the Cattaraugus Indian Reservation Health Center (CIRHC) and Community Health and Wellness Center. Health services are offered to those persons within the Purchased/Referred Care Services Delivery Area who are defined as eligible under federal and tribal guidelines. These services areas include the counties of Allegany, Cattaraugus, Chautauqua, Niagara (excluding the Tonawanda and Tuscarora Territories) and Erie in New York and Warren County in Pennsylvania. Our programs provide a full range of primary and preventive care for acute and chronic illness and injuries. In addition, we have service agreements with several local hospitals, professional groups and agencies for inpatient treatment and specialty care to round out our health programs. The Lionel R. John Health Center has been recognized by the National Committee for Quality Assurance (NCQA) as a Level 3 Patient Centered Medical Home. And NCQA has also recognized the Diabetes Program at LRJHC.
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.