MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedSupply Chain (3P Vendor)PHIHEALTH_BASICIDENTITY_BASICLowContained
ANTHEM HEALTH PLANS OF NEW HAMPSHIRE, INC.
bd_2701bb55c4eda4c6 · schema v1 · pii pii-v1
Full breach record for ANTHEM HEALTH PLANS OF NEW HAMPSHIRE, INC. →Anthem Health Plans of New Hampshire, Inc. (a subsidiary of Elevance Health) notified the NH Attorney General of a ransomware attack on its vendor, RRD. The incident occurred between Nov 29 and Dec 23, 2021. The attack impacted PHI and PII of 26 individuals (1 NH resident). Notifications were sent on Sept 27, 2022.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed26 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/elevance-health-20220926.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 26, 2022
- Raw hash
- 922fb5717e2e8ff7bc99bbaee2dca2eeb9fb1182d80b723e3e41cceb7162ac03
Reporting entity
- Name
- Elevance Health, Inc.norm: elevance health
Victim entity
- Name
- ANTHEM HEALTH PLANS OF NEW HAMPSHIRE, INC.norm: anthem health plans of new hampshire
Incident
- Discovered
- Dec 23, 2021
- Materiality determined
- —
- Notification sent
- Sep 27, 2022
- Affected individuals
- 26
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 40 weeks(277 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.