HackingHealthcareHealthcareCustomer Data InvolvedEmployee Data InvolvedPHIIdentity (basic)Government IDHealth (basic)MinorMediumContained

Internal Medicine Associates of Jasper, PC

bd_54d1d293ad4f00a4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 8, 2021

Filed

May 10, 2021

To disclose

9 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for Internal Medicine Associates of Jasper, PC →

Internal Medicine Associates of Jasper, PC (dba Prestige Medical Group) detected and stopped a network security incident on March 8, 2021. The incident potentially exposed full name, mailing address, birthdate, social security number, and medical information (PHI) of patients and employees. One New Hampshire resident was affected. The organization engaged third-party forensics, secured the network, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 63 days

Mar 8, 2021

Begins

Mar 8, 2021

Discovered

May 10, 2021

Filed

vs. sector median

4 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

HHS OCRbd_7e055c057a2cfa372021-05-10Verified
Montana State AGbd_185af3710ea738472021-05-05 · +5dVerified
Indiana State AGbd_38df11195525ccfb2021-05-05 · +5dVerified
Massachusetts State AGbd_39ced69f6ef0b2422021-05-17 · +7dVerified

Name: Internal Medicine Associates of Jasper, PC
norm: internal medicine associates of jasper

Name: Internal Medicine Associates of Jasper, PC
norm: internal medicine associates of jasper
Also named: Internal Medicine Associates of Jasper, PCdba oflegal entity
Prestige Medical Groupdba oftrade name
Industry: Healthcarellm

Discovered: Mar 8, 2021
Breach occurred: Mar 8, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 5, 2021
Affected individuals: 1state-resident count only
Data types: PHIIdentity (basic)Government IDHealth (basic)Minor
Data elements: Medical information
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Shut off all access to the network
Engaged a specialized third-party forensic incident response firm to assist with securing the environment
Initiated a comprehensive investigation into what sensitive data could have been compromised
Working with law enforcement to help respond to this incident
Changes made: Reviewed and altered its policies and procedures relating to the security of its systems and servers
Reviewed and altered its information life cycle management
Extended to all potentially impacted individuals an offer for free credit monitoring and identity theft protection through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(63 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGMay 5 · first

Indiana State AGMay 5 · first

HHS OCR+5d

New Hampshire State AG+5d · this page

Massachusetts State AG+12d

Pattern: first filing May 5 (MT), last May 17 (MA) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/internal-medicine-associates-jasper-20210510.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 10, 2021
Raw hash: f788bf25ae59b3fcf6602b95abd870e04cbda9a496a0fc1535a046597355461c

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityInternal Medicine Associates of Jasper, PC

Victim entityInternal Medicine Associates of Jasper, PC

Incidentdiscovered Mar 8, 2021

Stated responseShut off all access to the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov