Social EngineeringHealthcareHealthcarePhishingStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Cross Road Health Ministries, Inc.

bd_1c90ea1a13920f11 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 17, 2018

Filed

Mar 30, 2018

To disclose

10 weeks

Affected

1state residents only

Confidence

67%

Full breach record for Cross Road Health Ministries, Inc. →

Cross Road Health Ministries, Inc. reported a data security incident discovered on Jan 17, 2018, involving a fraudulent technical support company. The incident compromised employee payroll data including names, DOBs, SSNs, and financial account info. One NH resident was notified on March 30, 2018. Remediation included employee training, vendor policy review, and 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 72 days

Jan 17, 2018

Discovered

Mar 30, 2018

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Cross Road Health Ministries, Inc.
norm: cross road health ministries
Industry: Healthcarellm

Discovered: Jan 17, 2018
Materiality determined: —
Notification sent: Mar 30, 2018
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to law enforcement
Initial access: phishing_link

During the incident: Engaged forensics experts to conduct an investigation
Reported this incident to law enforcement
Changes made: Provided training to employees to identify and intercept fraudulent activity
Limiting employee vendor engagement to a list of acceptable vendors
Reviewing its policies and procedures
Provided all potentially affected individuals with 12 months of complimentary credit monitoring and identity theft restoration services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(72 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cross-road-health-20180330.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 30, 2018
Raw hash: c032292f9992c9e269ce2909245a865fecf5bbbc4b52333aabbde0f17cb9d6c1

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityCross Road Health Ministries, Inc.

Incidentdiscovered Jan 17, 2018

Stated responseEngaged forensics experts to conduct an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov