MalwareRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Bienville Orthopaedic Specialists LLC
bd_2af14f098d818e56 · schema v1 · pii pii-v1
Full breach record for Bienville Orthopaedic Specialists LLC →Bienville Orthopaedic Specialists LLC (BOS) reported a cyberattack on its computer systems. Unauthorized access occurred between Feb 3 and Mar 5, 2023, resulting in the unauthorized acquisition of PHI and personal data. BOS notified law enforcement, HHS, and state regulators. Nine New Hampshire residents were notified on Sep 1, 2023, and offered credit monitoring.
Leak gap clock⏱ Leak >90d26 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9 affectedView incident
A leak claim by abyss about this victim predates this filing by 180 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bienville-orthopaedic-specialists-20230901.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 1, 2023
- Raw hash
- acf047b79ab80c67ed5f299c4a006bfeb9ab7af9023719683f0ca0a19d14e135
Reporting entity
- Name
- Bienville Orthopaedic Specialists LLCnorm: bienville orthopaedic specialists
- Domain
- bienvilleortho.com
Victim entity
- Name
- Bienville Orthopaedic Specialists LLCnorm: bienville orthopaedic specialists
- Domain
- bienvilleortho.com
Incident
- Discovered
- Mar 5, 2023
- Materiality determined
- Jul 31, 2023
- Notification sent
- Sep 1, 2023
- Affected individuals
- 9
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementProviding written notice to relevant state and federal regulatorsProviding written notice to the three major credit reporting agenciesNotifying the U.S. Department of Health and Human Services
Compliance
- Time to disclose
- 26 weeks(180 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.