MalwareHealthcareHealthcareRansomwareSupply Chain (3P Vendor)Data ExfiltratedIdentity (basic)Government IDPHIMediumContained

LIFELONG MEDICAL CARE

bd_3a66e1161d4c7945 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 9, 2021

Filed

Sep 1, 2021

To disclose

23 days

Affected

5state residents only

Linked

6 filings

Confidence

66%

Full breach record for LIFELONG MEDICAL CARE →4 incidents on file

LifeLong Medical Care notified NH AG of a breach involving its third-party vendor Netgain. Netgain suffered a ransomware attack starting Nov 24, 2020. LifeLong discovered on Aug 9, 2021 that PHI and SSNs of 5 NH residents were accessed. Notifications sent Aug 24, 2021 with credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 258 days

discovery → filing · 23 days

Nov 24, 2020

Begins

Aug 9, 2021

Discovered

Sep 1, 2021

Filed

vs. sector median

9 wks faster

This filing is one of 6 about the same incident.View merged incident

Part of Netgain Networks supply-chain incident (2021) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_87534f0cb6f63b572021-08-27 · +5dVerified
California State AGbd_a2e73cbc0dbc19e52021-08-27 · +5dVerified
Oregon State AGbd_375760f91189226b2021-09-07 · +6dVerified by operator
HHS OCRbd_44c7006ac0001e2f2021-08-25 · +7dVerified

Show 1 more filing ↓up to 8d gap

Montana State AGbd_b8d43a349c42bd352021-08-24 · +8dVerified

Name: LIFELONG MEDICAL CARE
norm: lifelong medical care

Name: LIFELONG MEDICAL CARE
norm: lifelong medical care
Industry: Healthcarellm

Discovered: Aug 9, 2021
Breach occurred: Nov 24, 2020
Undetected for: 258 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 24, 2021
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDPHI
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General
Third party: via Netgain
Initial access: supply_chain

During the incident: Providing affected residents with written notification of this incident
Offering the affected residents complimentary one-year memberships with a credit monitoring service
Working with its third-party vendors to enhance security and oversight
Changes made: Working with its third-party vendors to enhance security and oversight
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Montana State AGAug 24 · first

HHS OCR+1d

Massachusetts State AG+3d

California State AG+3d

New Hampshire State AG+8d · this page

Oregon State AG+14d

Pattern: first filing Aug 24 (MT), last Sep 7 (OR) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lifelong-medical-care-20210901.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2021
Raw hash: 4f6e972418860f1f137939e35f71bb662417ca38e54107904a7ae1098ca9aaa0

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityLIFELONG MEDICAL CARE

Victim entityLIFELONG MEDICAL CARE

Incidentdiscovered Aug 9, 2021

Stated responseProviding affected residents with written notification of this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov