HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Coastal Orthopedics
bd_32ea7db31644fdf6 · schema v1 · pii pii-v1
Full breach record for Coastal Orthopedics →Coastal Orthopedics notified New Hampshire residents of a data breach occurring between June 6 and June 11, 2023. Unauthorized access to the network resulted in the exfiltration of personal information, including names and government identifiers. The incident was discovered on June 11, 2023. Coastal engaged law enforcement, implemented MFA and endpoint protection, and offered credit monitoring to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed174 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/coastal-orthopedics-20240626.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 26, 2024
- Raw hash
- 561a2866eb68cbc86f1573f4689f153c4ff3d46c8f133c8d60877ceea23e711d
Reporting entity
- Name
- Coastal Orthopedicsnorm: coastal orthopedics
- Domain
- coastalorthopedics.com
Victim entity
- Name
- Coastal Orthopedicsnorm: coastal orthopedics
- Domain
- coastalorthopedics.com
Incident
- Discovered
- Jun 11, 2023
- Materiality determined
- Jun 10, 2024
- Notification sent
- Jun 26, 2024
- Affected individuals
- 174
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementNotified the U.S. Department of Health and Human ServicesNotifying prominent media where required pursuant to HIPAAProviding written notice to relevant state and federal regulatorsNotifying the three major credit reporting agencies
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 months(381 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.