GLM-5.1

I need to brief the board of North Valley Health after a contained cybersecurity incident. Here are the verified facts: At 02:14 Tuesday, monitoring detected unusual authentication attempts against the remote-access gateway. The security team disabled external access at 02:31 and isolated two employee laptops. Investigation found that one billing employee entered credentials into a phishing site on Monday afternoon. The attacker used that account to access an email inbox and attempted to reach a shared finance folder, but endpoint controls blocked the attempt. There is currently no evidence that electronic health records, clinical systems, payment-card data, or patient portals were accessed. Approximately 1,840 emails in the compromised inbox may have been visible; a privacy review is determining whether any contained protected health information. Passwords and active sessions were reset for all remote-access users. Remote access resumed Wednesday at 09:00 with phishing-resistant multifactor authentication required. Clinical operations continued without interruption. Outside counsel and the cyber insurer are engaged. The forensic review should conclude within ten business days. Do not speculate beyond these facts.

I am underwriting the acquisition of Harbor House, a 42-room independent boutique hotel in Portland, Maine. Purchase price is $12.4 million, with a requested senior loan of $7.4 million at 7.1% fixed for five years, amortized over 25 years. Trailing-12-month revenue is $4.05 million, stabilized NOI is $1.02 million, occupancy is 71%, and ADR is $238. The appraisal values the property at $13.1 million. The sponsor operates two comparable New England hotels and will contribute $5 million in cash. Key concerns are seasonal demand, reliance on leisure travel, and $650,000 of planned room renovations during the first year.