MalwareProfessional ServicesHealthcareProfessional ServicesRansomwareData EncryptedTargetedIdentity (basic)Government IDMediumContained

Atlas MedStaff LLC

bd_64d12c1dc44a4484 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 21, 2021

Filed

Aug 8, 2022

To disclose

42 weeks

Affected

27state residents only

Linked

4 filings

Confidence

66%

Full breach record for Atlas MedStaff LLC →2 incidents on file

Atlas MedStaff LLC reported a malware incident affecting 27 New Hampshire residents. Unauthorized access occurred between Oct 15-21, 2021. Data included names, SSNs, and driver's licenses. Atlas engaged forensic specialists, notified law enforcement, and provided 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 42 weeks / 291 days

Oct 15, 2021

Begins

Oct 21, 2021

Discovered

Aug 8, 2022

Filed

vs. sector median

+24 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_29f6163be2f6f3622022-08-05 · +3dVerified
Maine State AGbd_5bab09265668bcbf2022-08-05 · +3dCandidate
Indiana State AGbd_6d0bce830ace0a292022-08-05 · +3dVerified

Name: Atlas MedStaff LLC
norm: atlas medstaff
Domain: atlasmedstaff.com

Name: Atlas MedStaff LLC
norm: atlas medstaff
Domain: atlasmedstaff.com
Industry: Professional ServicesllmHealthcarellm

Discovered: Oct 21, 2021
Breach occurred: Oct 15, 2021 – Oct 21, 2021
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 5, 2022
Affected individuals: 27state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the New Hampshire Attorney General

During the incident: Worked to secure our systems
With the assistance of third-party forensic specialists and commenced an investigation
Conducted a comprehensive and time-consuming review of the potentially affected data
Notified federal law enforcement regarding the incident
Providing access to credit monitoring services for one (1) year, through Experian
Changes made: Reviewed and updated existing policies and procedures relating to data protection and security
Implemented additional security measures to mitigate any risk associated with this incident and to better prevent future similar incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 42 weeks(291 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGAug 5 · first

Maine State AGAug 5 · first

Indiana State AGAug 5 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/atlas-medstaff-20220808.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 8, 2022
Raw hash: 6966cb830211c87985118f54e6471944ecb25068300444fd19528faf26125ca7

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAtlas MedStaff LLC

Victim entityAtlas MedStaff LLC

Incidentdiscovered Oct 21, 2021

Stated responseWorked to secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov