Social EngineeringHealthcareHealthcarePhishingDelayed DiscoveryIdentity (basic)Government IDMediumActive

National DCP, LLC

bd_44255e708d883d9f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 26, 2017

Filed

Aug 8, 2017

To disclose

6 weeks

Affected

19state residents only

Linked

2 filings

Confidence

66%

Full breach record for National DCP, LLC →2 incidents on file

National DCP, LLC notified New Hampshire AG of a phishing incident in March 2017 affecting 19 NH residents. Personal info (name, address, SSN, DOB) was in an accessed email account. Notification sent August 8, 2017. FBI/Secret Service contacted. Identity protection offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 117 days

discovery → filing · 6 weeks / 43 days

Mar 1, 2017

Begins

Jun 26, 2017

Discovered

Aug 8, 2017

Filed

vs. sector median

6 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_e495ed264c7a5fee2017-08-09 · +1dVerified

Name: National DCP, LLC
norm: national dcp

Name: National DCP, LLC
norm: national dcp
Industry: Healthcarellm

Discovered: Jun 26, 2017
Breach occurred: Mar 1, 2017
Undetected for: 117 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 8, 2017
Affected individuals: 19state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Contacted the FBI and Secret Service to request help
Offering one year of complimentary identity theft protection through Experian
Changes made: Retraining employees to better alert them to common scams
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGAug 8 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/national-dcp-20170808.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 8, 2017
Raw hash: d830427e3dfc3b2a0f3e41759ad2eecf48af69bbce698d65420504a3436889f6

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityNational DCP, LLC

Victim entityNational DCP, LLC

Incidentdiscovered Jun 26, 2017

Stated responseContacted the FBI and Secret Service to request help

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov