MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumActive
Harvard Pilgrim Health Care
bd_10d522138bb443a9 · schema v1 · pii pii-v1
Full breach record for Harvard Pilgrim Health Care →Supplemental security breach notification filed by Mullen Coughlin LLC on behalf of Harvard Pilgrim Health Care with the Maryland Attorney General. A ransomware incident occurred between March 28, 2023, and April 17, 2023. The breach compromised personal information (names, addresses, DOB, SSN) and protected health information (clinical records, diagnoses) for approximately 8 Maryland residents in this specific supplemental notice. The investigation is ongoing.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed8 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-372135.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2025
- Raw hash
- be3e7f22695a45ea2921c7191b1c84232c488999b3773742ab4b17b408b776d9
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Harvard Pilgrim Health Carenorm: harvard pilgrim health care
- Domain
- point32health.org
Incident
- Discovered
- Apr 17, 2023
- Materiality determined
- —
- Notification sent
- Jan 21, 2025
- Affected individuals
- 8
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- notified law enforcement and regulators
Compliance
- Time to disclose
- 31 months(941 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.