HackingProfessional ServicesHealthcareProfessional ServicesTargetedData ExfiltratedIdentity (basic)Government IDMediumContained

NHS Management, LLC

bd_051e4a36e243fc14 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 16, 2021

Filed

Apr 14, 2022

To disclose

48 weeks

Affected · nationwide

141 in this filing

Linked

5 filings

Confidence

66%

Full breach record for NHS Management, LLC →2 incidents on file

NHS Management, LLC notified the NH AG of a cyberattack discovered May 16, 2021. Unauthorized access occurred Feb 25-May 16, 2021. 14 individuals affected, including 1 NH resident. Data: names and SSNs. Response: investigation, law enforcement cooperation, credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 80 days

discovery → filing · 48 weeks / 333 days

Feb 25, 2021

Begins

May 16, 2021

Discovered

Apr 14, 2022

Filed

vs. sector median

+29 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_6f99094b3828290c2022-04-05 · +9dVerified
Massachusetts State AGbd_bc22dcd641773e162022-04-05 · +9dVerified
Oregon State AGbd_c6f0d8bd3129761a2022-04-05 · +9dVerified
Illinois State AGbd_f3d4cf4d73df20172022-01-01 · +103dCandidate

Name: NHS Management, LLC
norm: nhs management
Domain: nhsmanagement.com

Name: NHS Management, LLC
norm: nhs management
Domain: nhsmanagement.com
Industry: Professional ServicesllmHealthcarellm

Discovered: May 16, 2021
Breach occurred: Feb 25, 2021 – May 16, 2021
Undetected for: 80 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 5, 2022
Affected individuals: 14state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Office of the New Hampshire Attorney GeneralNotified and cooperated with federal law enforcement

During the incident: Launched an investigation to confirm the full nature and scope of the incident and restore functionality to impacted systems
Assessed and increased the security of relevant NHS systems
Notify potentially affected individuals
Notified and cooperated with federal law enforcement, as well as appropriate federal agencies
Providing access to credit monitoring services for one (1) year, through Kroll
Changes made: Reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 48 weeks(333 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+94d

Massachusetts State AG+94d

Oregon State AG+94d

New Hampshire State AG+103d · this page

Pattern: first filing Jan 1 (IL), last Apr 14 (NH) — a 103-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nhs-management-20220414.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 14, 2022
Raw hash: 057a8565ed9e3e3adfb5e56477ed66f7565ea2680b9b8dd2f6ab984f06ede11f

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityNHS Management, LLC

Victim entityNHS Management, LLC

Incidentdiscovered May 16, 2021

Stated responseLaunched an investigation to confirm the full nature and scope of the incident and restore functionality to impacted systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov