HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Physician's Business Office
bd_17318e6d4cd7304f · schema v1 · pii pii-v1
Full breach record for Physician's Business Office →Physician’s Business Office, Inc. (PBO) notified the New Hampshire Attorney General of a data security incident discovered in April 2022. The breach potentially affected 4 New Hampshire residents, exposing personal and protected health information including SSNs, driver's license numbers, and medical data. PBO engaged forensic investigators, secured its network, and offered 12 months of credit monitoring to affected individuals. Notifications were sent in September 2022.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_22d63588c8f3bfb9Maine State AGfiled 2022-09-23Candidate
- bd_6b5ee27620c5e075California State AGfiled 2022-09-23Verified
- bd_c8e23e57dc38b951Montana State AGfiled 2022-09-23Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/physicians-business-office-20220923.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 23, 2022
- Raw hash
- 91662bc0aeb384e2e8174ca63711dc10ed0c04121496ab6c873e7e2e03aa921c
Reporting entity
- Name
- Lewis Brisbois Bisgaard & Smith, PLLCnorm: lewis brisbois bisgaard smith
Victim entity
- Name
- Physician's Business Officenorm: physician s business office
Incident
- Discovered
- Apr 1, 2022
- Materiality determined
- —
- Notification sent
- Sep 23, 2022
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 weeks(175 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.