PhysicalHealthcareHealthcareTheftCustomer Data InvolvedPHIGovernment IDIdentity (basic)Health (basic)MediumContained

American Esoteric Laboratories

bd_3e7ed1917bc94f5e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 15, 2017

Filed

Apr 20, 2018

To disclose

27 weeks

Affected

3state residents only

Linked

3 filings

Confidence

66%

Full breach record for American Esoteric Laboratories →3 incidents on file

American Esoteric Laboratories reported the theft of an employee laptop on October 15, 2017. The unencrypted device may have contained PHI, SSNs, and medical records for 3 New Hampshire residents. The company disabled network access, notified police, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 27 weeks / 187 days

Oct 15, 2017

Begins

Oct 15, 2017

Discovered

Apr 20, 2018

Filed

vs. sector median

+18 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_46a03b440bec78352018-04-20Candidate
Massachusetts State AGbd_b0ba48f46e67786c2018-04-20Verified

Name: American Esoteric Laboratories
norm: american esoteric laboratories

Name: American Esoteric Laboratories
norm: american esoteric laboratories
Industry: Healthcarellm

Discovered: Oct 15, 2017
Breach occurred: Oct 15, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 20, 2018
Affected individuals: 3state-resident count only
Data types: PHIGovernment IDIdentity (basic)Health (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified Attorney General Joseph Foster, Consumer Protection and Antitrust Bureau, Office of the Attorney General, New Hampshire

During the incident: Disabled the stolen laptop’s access to its computer network
Reported the laptop theft to the local police
Disabled the employee’s email account
Conducted an investigation to determine what information may have been stored on the laptop
Changes made: Installing encryption technology
Updating relevant policies and procedures
Retraining staff
Offering twelve (12) months of credit monitoring and identity protection services through ID Experts® at no cost
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(187 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGApr 20 · first

Massachusetts State AGApr 20 · first

New Hampshire State AGApr 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/american-esoteric-20180420.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 20, 2018
Raw hash: f461f6065abfd3b4661a72f63b401cd5e74be7628b1129cda0677b1d07d77272

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAmerican Esoteric Laboratories

Victim entityAmerican Esoteric Laboratories

Incidentdiscovered Oct 15, 2017

Stated responseDisabled the stolen laptop’s access to its computer network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov