RGH Enterprises, Inc.

bd_526b639a12369691 · schema v1 · pii pii-v1

RGH Enterprises, Inc. d/b/a Edgepark Medical Supplies notified the NH Attorney General of a security event affecting 26 NH residents. Hackers exploited a vulnerability in Adobe Coldfusion on the company's web server between March 9-11, 2013, installing malware that intercepted online account usernames and passwords. The malware was discovered on December 12, 2013. Affected data included names, dates of birth, addresses, phone numbers, email addresses, partial credit card information, and for one individual, full credit card numbers. Health information including diagnoses, primary physicians, and order history was also potentially accessible. The company removed the malware, reset passwords, and offered 12 months of identity protection.

J jump to incidentP pin to compareR raw source