HackingHealthcareTechnologyHealthcareStolen CredentialsPhishingCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)Financial accountCredentialsMediumContained

Health Dialog Services Corporation

bd_2174ab77bbf6b00e · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 5, 2009

Filed

May 12, 2009

To disclose

7 days

Affected

390state residents only

Confidence

67%

Full breach record for Health Dialog Services Corporation →

Health Dialog Services Corp. notified NH AG of a May 5, 2009 virus compromise of employee computers. Data in IE cache (SSN, names, addresses, credit cards, passwords) was accessed. 390 NH residents notified. FBI notified. Credit monitoring provided.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 days

May 5, 2009

Discovered

May 12, 2009

Filed

vs. sector median

10 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed390 affectedView incident

Name: Health Dialog Services Corporation
norm: health dialog

Name: Health Dialog Services Corporation
norm: health dialog
Industry: HealthcarellmTechnologyllm

Discovered: May 5, 2009
Materiality determined: —
Notification sent: May 8, 2009
Affected individuals: 390state-resident count only
Data types: Government IDIdentity (basic)Financial accountCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to the FBI and local law enforcement
Initial access: phishing_attachment

During the incident: Successfully removed the virus from the network
Launched an internal investigation
Reported this incident to the FBI and local law enforcement
Provided notice to 390 residents of New Hampshire
Providing one year of credit monitoring and protection services through Equifax
Informed the employees how to place a fraud alert on their credit file
Changes made: Evaluating additional safeguards to help prevent a similar incident from occurring
Reviewing our information security processes
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/health-dialog-services-20090512.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 12, 2009
Raw hash: 7560d33476a42eeff533edd6104ad3332ce98f6510c4c0c1ad7618a4d7c91216

Reporting entityHealth Dialog Services Corporation

Victim entityHealth Dialog Services Corporation

Incidentdiscovered May 5, 2009

Stated responseSuccessfully removed the virus from the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov