MalwareRansomwareData ExfiltratedData PublishedData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
Rehabilitation Support Services
bd_09635bbd3db43505 · schema v1 · pii pii-v1
Full breach record for Rehabilitation Support Services →Rehabilitation Support Services, Inc. (RSS) notified the New Hampshire Attorney General of a ransomware incident detected on June 1, 2021. Unauthorized actors exfiltrated and published files containing PHI and PII (names, SSNs, DOBs) on a dark web site. One NH resident was notified on Sept 8, 2021. RSS engaged cybersecurity experts and the FBI, and provided credit monitoring via Equifax.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_257b807c9b82c506Maine State AGfiled 2021-09-10Candidate
- bd_5584f4969044ef7dHHS OCRfiled 2021-09-10Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/rehabilitation-support-services-20210910.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 10, 2021
- Raw hash
- 21abfba809985ae81d79134bf9601f70102488704f9f901a062bcf27e52a1b4c
Reporting entity
- Name
- Lewis Brisbois Bisgaard & Smith, PLLCnorm: lewis brisbois bisgaard smith
Victim entity
- Name
- Rehabilitation Support Servicesnorm: rehabilitation support
Incident
- Discovered
- Jun 1, 2021
- Materiality determined
- —
- Notification sent
- Sep 8, 2021
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 14 weeks(101 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.