MalwareHealthcareProfessional ServicesHealthcareRansomwareSupply Chain (3P Vendor)Data ExfiltratedRansom PaidIdentity (basic)Health (basic)Financial accountLowContained

Little Hill Foundation for the Rehabilitation of Alcoholics, Inc.

bd_1a14e231c2bd1dc4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 15, 2020

Filed

Jun 21, 2021

To disclose

36 weeks

Affected

9state residents only

Linked

5 filings

Confidence

66%

Full breach record for Little Hill Foundation for the Rehabilitation of Alcoholics, Inc. →2 incidents on file

Little Hill Foundation (Alina Lodge) notified NH AG of a third-party vendor breach involving Blackbaud. 9 NH residents affected. Data included PII and limited treatment info. Blackbaud suffered a ransomware attack in May 2020; data was exfiltrated. Victims offered 12 months credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 167 days

discovery → filing · 36 weeks / 249 days

May 1, 2020

Begins

Oct 15, 2020

Discovered

Jun 21, 2021

Filed

vs. sector median

+23 wks slower

This filing is one of 5 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_2a3c55c9d6af4d682021-06-16 · +5dVerified
HHS OCRbd_a19ff214f5c585b82021-06-16 · +5dVerified
Indiana State AGbd_e1f3b250412ac3a52021-06-16 · +5dVerified
Maine State AGbd_f12e30a7257222b52021-06-16 · +5dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Little Hill Foundation for the Rehabilitation of Alcoholics, Inc.
norm: little hill foundation for the rehabilitation of alcoholics
Also named: Little Hill Foundation for the Rehabilitation of Alcoholics, Inc.dba oflegal entity
Alina Lodgedba oftrade name
Industry: HealthcarellmProfessional Servicesllm

Discovered: Oct 15, 2020
Breach occurred: May 1, 2020 – Jul 16, 2020
Undetected for: 167 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 21, 2021
Affected individuals: 9state-resident count only
Data types: Identity (basic)Health (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General

During the incident: Informed law firm, Wilson Elser Moskowitz Edelman & Dicker LLP
Began identifying individuals contained within the Blackbaud platforms
Provided impacted individuals with complimentary credit monitoring and cyber monitoring services for 12 months through TransUnion Interactive
Changes made: Hardening Blackbaud’s environment through enhancements to access management, network segmentation, and deployment of additional endpoint and network-based platforms
Steps to improve to the granularity of reporting at both the host and network level to ensure intrusion detection capabilities
Accelerating efforts to add multi-factor authentication to all of Blackbaud’s self-hosted solutions
Ensuring all users reset their passwords regularly
Requiring stronger user passwords for certain customers
Increasing efforts to migrate customers to Cloud environments (including Microsoft Azure and Amazon Web Services)
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 36 weeks(249 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Maine State AGJun 16 · first

HHS OCRJun 16 · first

Indiana State AGJun 16 · first

Maine State AGJun 16 · first

New Hampshire State AG+5d · this page

Pattern: first filing Jun 16 (ME), last Jun 21 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/little-hill-foundation-alcoholics-dba-alina-lodge-20210621.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 21, 2021
Raw hash: d76d0b44b630c14e77d5faa222f8b75e8d0cce7d13bf7be23bfd6219ffa6b73d

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityLittle Hill Foundation for the Rehabilitation of Alcoholics, Inc.

Incidentdiscovered Oct 15, 2020

Stated responseInformed law firm, Wilson Elser Moskowitz Edelman & Dicker LLP

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov