MalwareRansomwareData ExfiltratedCustomer Data InvolvedData EncryptedIDENTITY_GOVERNMENTIDENTITY_BASICPHIMediumContained
STAR GROUP, LTD.
bd_230337d0f70cb052 · schema v1 · pii pii-v1
Full breach record for STAR GROUP, LTD. →Star Group, L.P. filed a supplemental notice with the New Hampshire Attorney General regarding a ransomware incident affecting its self-insured health plan. Unauthorized access occurred July 15-17, 2021, resulting in system encryption and exfiltration of names and Social Security numbers for 78 NH residents. Star engaged law enforcement and forensic investigators, offered credit monitoring, and enhanced network security protocols.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed78 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/star-group-20220126.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 25, 2022
- Raw hash
- 2ef6c61e10fe3fb81e1303256e160f57a3dad30dc883fb88007495cf79a2f705
Reporting entity
- Name
- STAR GROUP, LTD.norm: star group
Victim entity
- Name
- STAR GROUP, LTD.norm: star group
Incident
- Discovered
- Aug 24, 2021
- Materiality determined
- —
- Notification sent
- Jan 26, 2022
- Affected individuals
- 78
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 22 weeks(154 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.