MalwareHealthcareHealthcareRansomwareData EncryptedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Dr. DeLuca Dr. Marciano & Associates, P.C.

bd_3f15bce6ba3695a3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 29, 2018

Filed

Jan 31, 2019

To disclose

9 weeks

Affected

29state residents only

Linked

4 filings

Confidence

67%

Full breach record for Dr. DeLuca Dr. Marciano & Associates, P.C. →

Dr. DeLuca Dr. Marciano & Associates, P.C. reported a ransomware incident discovered on November 29, 2018, affecting 29 New Hampshire residents. The attack encrypted systems containing PHI and PII (names, SSNs, DOBs, insurance info). Systems were restored from backups. Remediation included closing remote ports and installing stronger antivirus. Affected individuals received 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 63 days

Nov 29, 2018

Discovered

Jan 31, 2019

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

HHS OCRbd_0c9156268136298b2019-01-25 · +6dVerified
Montana State AGbd_257e599ff2cd23432019-01-25 · +6dVerified
Massachusetts State AGbd_51102c73d17b6f562019-01-25 · +6dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Dr. DeLuca Dr. Marciano & Associates, P.C.
norm: dr deluca dr marciano associates
Industry: Healthcarellm

Discovered: Nov 29, 2018
Materiality determined: —
Notification sent: Jan 25, 2019
Affected individuals: 29state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Social Security numberMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Contacted its information technology team who immediately ensured that further access was denied
Developed a plan to recover the encrypted data
Restore its systems from these backups
Provided potentially affected individuals with identity theft restoration and credit monitoring services for a period of twenty-four (24) months at no cost to the individuals, through ID Experts
Changes made: Closing all remote access ports
Installing stronger anti-virus software
Obtaining ransomware protection
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(63 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

HHS OCRJan 25 · first

Montana State AGJan 25 · first

Massachusetts State AGJan 25 · first

New Hampshire State AG+6d · this page

Pattern: first filing Jan 25 (CT), last Jan 31 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/deluca-marciano-20190131.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 31, 2019
Raw hash: 7d39ac57b165a19b4fe6165f726227e1b488f2ff5b97356a67c0eca4d2289c93

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityDr. DeLuca Dr. Marciano & Associates, P.C.

Incidentdiscovered Nov 29, 2018

Stated responseContacted its information technology team who immediately ensured that further access was denied

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov