PhysicalHealthcareFinancial ServicesHealthcareTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Global Care Delivery, Inc.

bd_077327de17d628ff · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 11, 2015

Filed

Jun 12, 2015

To disclose

5 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Global Care Delivery, Inc. →2 incidents on file

Global Care Delivery, Inc. notified the NH Attorney General of the theft of five unencrypted laptops from its Dallas office on or about September 2, 2014. The incident was discovered on May 11, 2015. One New Hampshire resident's PHI, SSN, and PII were potentially exposed. GCD offered 12 months of identity theft protection and implemented encryption for all devices.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 251 days

discovery → filing · 5 weeks / 32 days

Sep 2, 2014

Begins

May 11, 2015

Discovered

Jun 12, 2015

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Global Care Delivery, Inc.
norm: global care delivery

Name: Global Care Delivery, Inc.
norm: global care delivery
Industry: HealthcarellmFinancial Servicesllm

Discovered: May 11, 2015
Breach occurred: Sep 2, 2014
Undetected for: 251 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 12, 2015
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General Joseph Foster

During the incident: Notified law enforcement at the time of the theft
Communicated to North Shore-LIJ on May 11, 2015
Sent notice to the affected individual via first class mail on June 12, 2015
Notifying the major credit bureaus of this incident
Offered the affected individual the services of Kroll, Inc. to provide identity theft protection at no cost for twelve (12) months
Changes made: Encryption of all laptops, servers and other electronic devices maintaining North Shore-LIJ patient information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(32 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/global-care-delivery-20150612.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 12, 2015
Raw hash: 79e0fa5aad4c0896a09600ca126775bcb0fb73fbaa779262737faf3ffd0986be

Reporting entityGlobal Care Delivery, Inc.

Victim entityGlobal Care Delivery, Inc.

Incidentdiscovered May 11, 2015

Stated responseNotified law enforcement at the time of the theft

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov