DisclosureLens
Social EngineeringProfessional ServicesProfessional ServicesPhishingData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

EMERGENCY NURSES ASSOCIATION

bd_00ea82c7c47ba8e9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 17, 2021

Filed

Oct 26, 2021

To disclose

23 weeks

Affected

1state residents only

Linked

4 filings

Confidence

66%
Full breach record for EMERGENCY NURSES ASSOCIATION

Emergency Nurses Association (ENA) notified the New Hampshire Attorney General of a data security incident involving unauthorized access to employee email accounts. Unauthorized access occurred between March 25 and May 17, 2021, via phishing leading to credential compromise. One New Hampshire resident's name and Social Security Number were accessed. ENA engaged forensic investigators, reported to law enforcement, enhanced email security, and offered one year of identity monitoring services. Notification was sent on October 26, 2021.

Incident timeline

undetected · 53 days
discovery → filing · 23 weeks / 162 days

Mar 25, 2021

Begins

May 17, 2021

Discovered

Oct 26, 2021

Filed

vs. sector median

+4 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Massachusetts State AGOct 26 · first
Maine State AGOct 26 · first
Indiana State AGOct 26 · first
New Hampshire State AGOct 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.