Social EngineeringHealthcareTechnologyHealthcarePhishingStolen CredentialsTargetedCustomer Data InvolvedPIIIdentity (basic)LowContained

Triopsy

bd_31ce40ac2629c500 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 13, 2021

Filed

Dec 3, 2021

To disclose

12 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Triopsy →

Triopsy Medical, Inc. notified the NH Attorney General of a data incident discovered on Sept 13, 2021. An unauthorized third party accessed an employee's email account sometime in early 2021. One NH resident was potentially affected. Personal information was present in the account. Triopsy retained forensic specialists, counsel, and Experian for credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 255 days

discovery → filing · 12 weeks / 81 days

Jan 1, 2021

Begins

Sep 13, 2021

Discovered

Dec 3, 2021

Filed

vs. sector median

+3 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Godfrey & Kahn, S.C.
norm: godfrey kahn
Domain: triopsy.com

Name: Triopsy
norm: triopsy
Domain: triopsy.com
Industry: HealthcarellmTechnologyllm

Discovered: Sep 13, 2021
Breach occurred: Jan 1, 2021 – Mar 31, 2021
Undetected for: 255 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 29, 2021
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Retained forensic specialists and counsel
Began investigating
Retained Experian to provide credit monitoring to impacted individuals
Changes made: Implemented additional safeguards for its email accounts
Reviewing its security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(81 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/triopsy-medical-20211203.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 3, 2021
Raw hash: 62351137e0ab706e37d52bffe79d41793680ac15ed7263a7d923f37fd964e2b9

Reporting entityGodfrey & Kahn, S.C.

Victim entityTriopsy

Incidentdiscovered Sep 13, 2021

Stated responseRetained forensic specialists and counsel

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov