Social EngineeringHealthcareProfessional ServicesHealthcarePhishingBECMulti-Stage ChainCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

Amergis Healthcare Staffing, Inc.

bd_11420dc24b39a114 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 6, 2024

Filed

Dec 9, 2024

To disclose

44 weeks

Affected

69state residents only

Linked

6 filings

Confidence

67%

Full breach record for Amergis Healthcare Staffing, Inc. →

Amergis Healthcare Staffing, Inc. reported a business email compromise detected on February 6, 2024. The incident involved phishing leading to unauthorized access. Personal information of 69 New Hampshire residents was potentially impacted. Amergis engaged experts, notified law enforcement, and mailed notices on November 29, 2024, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 44 weeks / 307 days

Feb 6, 2024

Discovered

Dec 9, 2024

Filed

vs. sector median

+35 wks slower

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_9298aef68f77de862024-12-09Verified
California State AGbd_8213325769b302c12024-12-08 · +1dVerified
Montana State AGbd_4783840c8a708a062024-12-07 · +2dCandidate
Vermont State AGbd_8ad7027bd6e50aac2024-12-07 · +2dVerified

Show 1 more filing ↓up to 2d gap

Maine State AGbd_dd0168851fe19ccc2024-12-07 · +2dVerified by operator

Name: Amergis Healthcare Staffing, Inc.
norm: amergis healthcare staffing

Name: Amergis Healthcare Staffing, Inc.
norm: amergis healthcare staffing
Industry: HealthcarellmProfessional Servicesllm

Discovered: Feb 6, 2024
Materiality determined: —
Notification sent: Nov 29, 2024
Affected individuals: 69state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: phishing_link

During the incident: Secured and remediated the compromise
Engaged additional third-party experts
Enhanced its data security
Commenced an investigation
Conducted an extensive third-party data mining process
Notified law enforcement
Mailed incident notification letters to 69 residents
Offered complimentary credit monitoring, identity protection services, and identity theft insurance
Changes made: Retrained employees on phishing and information governance
Enhanced network security and data privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 44 weeks(307 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGDec 7 · first

Vermont State AGDec 7 · first

Maine State AGDec 7 · first

California State AG+1d

Massachusetts State AG+2d

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/amergis-healthcare-staffing-20241209.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 9, 2024
Raw hash: 47af2d5c23433140edfa0bf6ba1636601993cd443e9bfee7d9bac909ca0a9090

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityAmergis Healthcare Staffing, Inc.

Victim entityAmergis Healthcare Staffing, Inc.

Incidentdiscovered Feb 6, 2024

Stated responseSecured and remediated the compromise

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov