HackingData ExfiltratedCustomer Data InvolvedDownstream VictimsPIIIDENTITY_BASICIDENTITY_GOVERNMENTHighResolved
Shields Health Solutions
bd_0c28877aa5207752 · schema v1 · pii pii-v1
Full breach record for Shields Health Solutions →Shields Health Care Group, Inc. issued a supplemental notice to the New Hampshire Attorney General regarding a data security incident. An unknown actor gained unauthorized access to Shields systems between March 7 and March 21, 2022. The breach impacted approximately 9,789 New Hampshire residents, exposing personal information including Social Security numbers. Shields notified law enforcement, engaged forensic specialists, rebuilt systems, and provided 24 months of credit monitoring through Kroll to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8e834a0cb07d4cf9Vermont State AGfiled 2023-04-19(5d gap)Verified
- bd_f4afa3fde068325bCalifornia State AGfiled 2023-04-19(5d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/shields-health-care-group-20230424.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 24, 2023
- Raw hash
- 7ed50599919a5c797e029d6ec3f596ca0769aff1a0234fce9551d24c71238450
Reporting entity
- Name
- Shields Health Solutionsnorm: shields health
- Domain
- shieldshealthsolutions.com
Victim entity
- Name
- Shields Health Solutionsnorm: shields health
- Domain
- shieldshealthsolutions.com
Incident
- Discovered
- Mar 28, 2022
- Materiality determined
- —
- Notification sent
- Apr 19, 2023
- Affected individuals
- 9,789
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementContinues to provide written notice to relevant state and federal regulatorsContinues to update the U.S. Department of Health and Human ServicesContinues to update the three major credit reporting agencies
Compliance
- Time to disclose
- 13 months(392 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.