HackingCustomer Data InvolvedEmployee Data InvolvedDownstream VictimsIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumContained
Heartland Alliance
bd_31e23de481665206 · schema v1 · pii pii-v1
Full breach record for Heartland Alliance →Heartland Alliance notified the NH AG of a data security incident in late January 2022 where an unauthorized actor accessed personal information including SSNs, driver's licenses, financial accounts, and health data. Two NH residents were affected. Notices were sent in December 2022. Credit monitoring was offered.
Leak gap clock✗ Leak >180d46 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
A leak claim by suncrypt about this victim predates this filing by 315 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_23693f388b81a2c9Maine State AGfiled 2022-12-19(1d gap)Candidate
- bd_20a1841af7afcb62Montana State AGfiled 2022-12-15(5d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/heartland-alliance-20221220.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 20, 2022
- Raw hash
- f505dc589ae48e70e4a52c7fb6e07982b7a049c37facc85ba1572a2a80981860
Reporting entity
- Name
- Heartland Alliancenorm: heartland alliance
Victim entity
- Name
- Heartland Alliancenorm: heartland alliance
Incident
- Discovered
- Jan 31, 2022
- Materiality determined
- Apr 27, 2022
- Notification sent
- Dec 15, 2022
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney GeneralReported the incident to the Federal Bureau of Investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 46 weeks(323 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.