MalwareRansomwareData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedPIIFINANCIAL_ACCOUNTCREDENTIALSLowContained
Pioneer Valley Ophthalmic Consultants, PC
bd_4b18c4c790d90963 · schema v1 · pii pii-v1
Full breach record for Pioneer Valley Ophthalmic Consultants, PC →Pioneer Valley Ophthalmic Consultants (PVOC) notified the NH AG of a third-party vendor (AMM) breach affecting 350 NH residents. AMM's billing servers were hit by malware Nov 13-15, 2021, and its patient portal was vulnerable until Oct 26, 2021. PVOC learned of the malware attack on March 3, 2022. Data potentially exposed included names, emails, and partial payment card info. PVOC offered 1 year of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_7b723d47816a115aHHS OCRfiled 2023-05-26(5d gap)Verified
- bd_1d56e6a2db4b4736Vermont State AGfiled 2023-05-22(9d gap)Verified
- bd_d09209cda06f2c25Montana State AGfiled 2023-05-22(9d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/pioneer-valley-ophthalmic-consultants-20230531.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 31, 2023
- Raw hash
- 71a900238a78cffb70560524c72ea76580844a8e46270e64c4090264c46c1793
Reporting entity
- Name
- Pioneer Valley Ophthalmic Consultants, PCnorm: pioneer valley ophthalmic consultants
Victim entity
- Name
- Pioneer Valley Ophthalmic Consultants, PCnorm: pioneer valley ophthalmic consultants
Incident
- Discovered
- Mar 3, 2022
- Materiality determined
- —
- Notification sent
- May 19, 2023
- Affected individuals
- 350
- Data types
- PIIFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1071 Application Layer Protocol
- Threat actor
- External
- Regulator citations
- Notified the Secretary of Health and Human Services (HHS) pursuant to HIPAA and HITECH
- Third party
- via Alta Medical Management and ECL Group, LLC
Compliance
- Time to disclose
- 15 months(454 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.