HackingTechnologyHealthcareInformationCustomer Data InvolvedPIIIdentity (basic)LowContained

3D Diagnostix, Inc.

bd_5480f70fab2ebecb · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 3, 2023

Filed

Feb 21, 2023

To disclose

7 weeks

Affected

11state residents only

Linked

5 filings

Confidence

66%

Full breach record for 3D Diagnostix, Inc. →

3D Diagnostix, Inc. notified the New Hampshire Attorney General on February 17, 2023, of a data breach affecting 11 New Hampshire residents. Unauthorized access to company servers occurred on or about October 15, 2022, and was discovered on January 3, 2023. Personal information of dental clinic owners/employees was accessed. 3DDX engaged Stroz Friedberg for forensic review, reset credentials, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 80 days

discovery → filing · 7 weeks / 49 days

Oct 15, 2022

Begins

Jan 3, 2023

Discovered

Feb 21, 2023

Filed

vs. sector median

8 wks faster

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_438b3a32e3bb62042023-02-21Candidate
Massachusetts State AGbd_81f3e2ac075ef3cd2023-02-21Verified
Montana State AGbd_eed6abc4018fc8fe2023-02-21Verified
Indiana State AGbd_d264aba91f390fce2023-02-17 · +4dVerified

Name: WILMER CUTLER PICKERING HALE AND DORR LLP
norm: wilmer cutler pickering hale and dorr

Name: 3D Diagnostix, Inc.
norm: 3d diagnostix
Industry: TechnologyllmHealthcarellm

Discovered: Jan 3, 2023
Breach occurred: Oct 15, 2022
Undetected for: 80 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 17, 2023
Affected individuals: 11state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: valid_credentials

During the incident: Restricting system access and resetting credentials
Eliminating the issue that raised the concern
Retaining outside counsel to assist in investigating this matter
Activating through counsel Stroz Friedberg, a leading global cybersecurity firm, to conduct a thorough forensic review
Reviewing the potentially affected documents to identify what information was potentially accessed
Offering one (1) year of credit monitoring services to impacted residents
Changes made: Implemented additional security measures, internal controls, and safeguards
Made changes to our policies and procedures to prevent a similar occurrence in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGFeb 17 · first

Maine State AG+4d

Massachusetts State AG+4d

Montana State AG+4d

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/3d-diagnostix-20230221.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 21, 2023
Raw hash: 15af2f09e76e8f58f1af09208e44d6cd3feca3c5c93eb6ceecaa2d030018c34b

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWILMER CUTLER PICKERING HALE AND DORR LLP

Victim entity3D Diagnostix, Inc.

Incidentdiscovered Jan 3, 2023

Stated responseRestricting system access and resetting credentials

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov