HackingStolen CredentialsPhishingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Comprehensive Health Services
bd_3287d556e934a6bd · schema v1 · pii pii-v1
Full breach record for Comprehensive Health Services →Comprehensive Health Services (CHS) submitted a supplemental notice to the New Hampshire Attorney General regarding a data security incident. The breach involved unauthorized access to invoicing files containing names and Social Security numbers of approximately 428 New Hampshire residents (employees of CHS customers). The incident was detected on September 30, 2020, following fraudulent wire transfers, and confirmed on November 3, 2021. CHS engaged forensic experts, notified the FBI, and offered credit monitoring services to affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_7b6e34bd70633badMaine State AGfiled 2022-03-16(1d gap)Candidate
- bd_119a2929b9bc9c2bNew Hampshire State AGfiled 2022-02-15(28d gap)Candidate
- bd_71314889a3bf0e51New Hampshire State AGfiled 2022-01-20(54d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/comprehensive-health-20220314.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 15, 2022
- Raw hash
- 7b05d4c1ca97a3fbcf205a4271601b41ee623779e80be25c6cb84a387cbe25e7
Reporting entity
- Name
- Lewis Brisbois Bisgaard & Smith, PLLCnorm: lewis brisbois bisgaard smith
Victim entity
- Name
- Comprehensive Health Servicesnorm: comprehensive health
Incident
- Discovered
- Sep 30, 2020
- Materiality determined
- —
- Notification sent
- Mar 14, 2022
- Affected individuals
- 428
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1566 Phishing
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General John Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 months(531 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.