MalwareHealthcareHealthcareRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedIdentity (basic)Health (basic)Government IDMediumContained

Cradle of Hope Adoption Center, Inc.

bd_2e731f042c12b1b3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 29, 2021

To disclose

—

Affected

4state residents only

Linked

5 filings

Confidence

66%

Full breach record for Cradle of Hope Adoption Center, Inc. →

Cradle of Hope Adoption Center, Inc. suffered a ransomware incident on June 4, 2021, resulting in encrypted data and potential unauthorized access to client files. The investigation determined that an unauthorized user may have downloaded files containing names, contact info, health info, and passport data for 4 New Hampshire residents. Notifications began July 28, 2021, with free credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 4, 2021

Begins

Jul 29, 2021

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_0677694cb36c86082021-07-28 · +1dCandidate
Indiana State AGbd_4708df9a812e1f562021-07-28 · +1dVerified
Massachusetts State AGbd_8ba6741c379962002021-07-28 · +1dVerified
Maine State AGbd_b602354159d57cf52021-07-28 · +1dVerified

Name: Cradle of Hope Adoption Center, Inc.
norm: cradle of hope adoption center

Name: Cradle of Hope Adoption Center, Inc.
norm: cradle of hope adoption center
Industry: Healthcarellm

Discovered: —
Breach occurred: Jun 4, 2021
Materiality determined: —
Notification sent: Jul 28, 2021
Affected individuals: 4state-resident count only
Data types: Identity (basic)Health (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice Consumer Protection Bureau

During the incident: Began an investigation to understand the scope and impact
Identified which individuals may have had their personal information affected
Began providing notification to those individuals
Offering to provide credit monitoring and identity theft protection services to potentially affected individuals free of charge
Changes made: Updating its information security practices
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJul 28 · first

Indiana State AGJul 28 · first

Massachusetts State AGJul 28 · first

Maine State AGJul 28 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cradle-hope-adoption-center-20210729.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 29, 2021
Raw hash: 72cc305ad605866be3633d1b41261199341b3a2c991c23d0ddbfcaac8296947a

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCradle of Hope Adoption Center, Inc.

Victim entityCradle of Hope Adoption Center, Inc.

IncidentRansomware

Stated responseBegan an investigation to understand the scope and impact

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov