MalwareHealthcareHealthcareRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

REGIONAL CARE OF ROGERS, LLC

bd_116ea9b6cd53e04a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 18, 2024

Filed

Dec 16, 2024

To disclose

13 weeks

Affected

177state residents only

Linked

9 filings

Confidence

67%

Full breach record for REGIONAL CARE OF ROGERS, LLC →

Regional Care, Inc. notified the New Hampshire Attorney General of a ransomware incident discovered on September 18, 2024. An unauthorized actor gained access to systems, potentially acquiring files containing personal information of 177 New Hampshire residents. The company engaged forensic specialists, contained the threat, and is offering credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 89 days

Sep 18, 2024

Discovered

Dec 16, 2024

Filed

vs. sector median

+2 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Massachusetts State AGbd_11fd58f6cee523182024-12-16Verified
Washington State AGbd_415a61c906124d0f2024-12-16Verified
California State AGbd_46dc2c6dcada51fc2024-12-16Verified
Maine State AGbd_9136a94a45daec342024-12-16Verified

Show 4 more filings ↓up to 15d gap

Vermont State AGbd_af65ae4d51784af32024-12-16Verified
Montana State AGbd_d2a71d51a5ee73b42024-12-16Verified
HHS OCRbd_ed7c62dc9c46a5e62024-12-17 · +1dVerified
Illinois State AGbd_481baaa2e3b92a002024-12-01 · +15dCandidate

Name: REGIONAL CARE OF ROGERS, LLC
norm: regional care of rogers

Name: REGIONAL CARE OF ROGERS, LLC
norm: regional care of rogers
Industry: Healthcarellm

Discovered: Sep 18, 2024
Materiality determined: —
Notification sent: Dec 16, 2024
Affected individuals: 177state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John Formella, Office of the Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Acted quickly to contain the threat
Investigate
Ensure the security of its systems with the assistance of third-party forensic specialists
Providing the affected residents with notification of this incident
Offering the affected residents ... complimentary membership with a credit monitoring service
Changes made: Continually evaluates and modifies its practices to enhance the security and privacy of the personal information it maintains
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(89 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGDec 1 · first

Massachusetts State AG+15d

Washington State AG+15d

California State AG+15d

Maine State AG+15d

Vermont State AG+15d

Montana State AG+15d

New Hampshire State AG+15d · this page

HHS OCR+16d

Pattern: first filing Dec 1 (IL), last Dec 17 (NE) — a 16-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/regional-care-20241216.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 16, 2024
Raw hash: 64dee3059b1215bbc36758a04ea194eb716737a626a51297399f38247eb44345

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityREGIONAL CARE OF ROGERS, LLC

Victim entityREGIONAL CARE OF ROGERS, LLC

Incidentdiscovered Sep 18, 2024

Stated responseActed quickly to contain the threat

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov