HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedTargetedPIIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
VeriSource Services, Inc.
bd_67c839a70c6cf699 · schema v1 · pii pii-v1
Full breach record for VeriSource Services, Inc. →VeriSource Services, Inc. notified the NH AG of a data security incident affecting 78 NH residents. Unauthorized access occurred on Feb 27, 2024, discovered Feb 28, 2024. Personal info including SSNs and health data was acquired. VSI engaged forensic investigators, reported to the FBI, and offered credit monitoring. No evidence of misuse found.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_2bebda8f6afd4e93Indiana State AGfiled 2024-08-20Verified
- bd_9c4efc3f667e3b99Montana State AGfiled 2024-08-20Verified
- bd_bf68061985016802California State AGfiled 2024-08-20Verified
- bd_ceca6e13280ab6a1HHS OCRfiled 2024-08-20Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_7bbe2038e18f3975Vermont State AGfiled 2024-08-21(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/verisource-20240820.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 20, 2024
- Raw hash
- dda224eb145c2ff37855006dacd6cfe5cf572cd9cf345c483dce431558df1dd3
Reporting entity
- Name
- VeriSource Services, Inc.norm: verisource services
Victim entity
- Name
- VeriSource Services, Inc.norm: verisource services
Incident
- Discovered
- Feb 28, 2024
- Materiality determined
- Aug 12, 2024
- Notification sent
- Aug 20, 2024
- Affected individuals
- 78
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the FBI and will cooperate with any resulting investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 weeks(174 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.