MalwareHealthcareTechnologyHealthcareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumContained

US FERTILITY ENTERPRISES, LLC

bd_22f63ea0d56ffbcf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 14, 2020

Filed

Jan 20, 2021

To disclose

18 weeks

Affected

402state residents only

Linked

4 filings

Confidence

66%

Full breach record for US FERTILITY ENTERPRISES, LLC →2 incidents on file

US Fertility LLC notified the New Hampshire Attorney General of a ransomware incident affecting 402 NH residents. Unauthorized access occurred between August 12 and September 14, 2020. Encrypted data included names, SSNs, driver's licenses, and medical records. USF retained forensic specialists, notified law enforcement, and provided 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 33 days

discovery → filing · 18 weeks / 128 days

Aug 12, 2020

Begins

Sep 14, 2020

Discovered

Jan 20, 2021

Filed

vs. sector median

+7 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_1a8f96c8084b0f5d2021-01-08 · +12dVerified
California State AGbd_26fe6536787523a82021-01-08 · +12dCandidate
Indiana State AGbd_62c2c6d3773a42ce2021-01-08 · +12dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: US FERTILITY ENTERPRISES, LLC
norm: us fertility
Industry: HealthcarellmTechnologyllm

Discovered: Sep 14, 2020
Breach occurred: Aug 12, 2020 – Sep 14, 2020
Undetected for: 33 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 8, 2021
Affected individuals: 402state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau

During the incident: Retained third-party computer forensic specialists to assist in its investigation
Proactively removed a number of systems from its network upon discovering the Incident
Remediated the malware identified, ensured the security of its environment, and reconnected systems on September 20, 2020
Notified federal law enforcement authorities of the Incident and continues to cooperate with their investigation
Changes made: Fortified the security of its firewall
Utilized the forensic specialists engaged to monitor network activity and remediate any suspicious activity
Providing notification to potentially impacted individuals as quickly as possible
Adapting its existing employee training protocols relating to data protection and security, including training targeted at recognizing phishing emails
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(128 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGJan 8 · first

California State AGJan 8 · first

Indiana State AGJan 8 · first

New Hampshire State AG+12d · this page

Pattern: first filing Jan 8 (MA), last Jan 20 (NH) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/us-fertility-20210120.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 20, 2021
Raw hash: e2d118e2580cb31caa76c5df5df101239023285149f760b6be345049f2c97b5b

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityUS FERTILITY ENTERPRISES, LLC

Incidentdiscovered Sep 14, 2020

Stated responseRetained third-party computer forensic specialists to assist in its investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov