MalwareTechnologyHealthcareInformationRansomwareRansom DemandedEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDEmploymentMinorMediumContained

ISS Solutions

bd_13457cb99b58b2d3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 6, 2018

To disclose

—

Affected

20state residents only

Confidence

66%

Full breach record for ISS Solutions →

ISS Solutions, a Geisinger Health System business, suffered a ransomware attack on January 23, 2018. Sensitive data, including names and social security numbers of current and former employees and their dependents, was present on affected drives. The incident affected 20 New Hampshire residents. No evidence of data theft was found. The company disabled internet connections, conducted a forensic analysis, and offered one year of complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 23, 2018

Begins

Mar 6, 2018

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed20 affectedView incident

Name: ISS Solutions
norm: iss solutions

Name: ISS Solutions
norm: iss solutions
Industry: TechnologyllmHealthcarellm

Discovered: —
Breach occurred: Jan 23, 2018
Materiality determined: —
Notification sent: Mar 7, 2018
Affected individuals: 20state-resident count only
Data types: Identity (basic)Government IDEmploymentMinor
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice Office of the Attorney General

During the incident: Disabled internet connections to prevent any potential spread of the ransomware
Began preserving data for a forensic analysis
Started a forensic investigation to determine whether any data was stolen
Alerted appropriate authorities
Offering a complimentary one-year membership of Experian IdentityWorks Credit 38
Changes made: Reviewing our security safeguards
Updating our systems and security procedures to further minimize the risk of any similar incident in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/iss--solutions-20180306.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 6, 2018
Raw hash: c697abff82abd07fd953f04c0de684fbead1ba62b809dbd1f583720c71d22500

Reporting entityISS Solutions

Victim entityISS Solutions

IncidentRansomware

Stated responseDisabled internet connections to prevent any potential spread of the ransomware

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov