HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryMulti-Stage ChainIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICPHIHighActive
Shields Health Solutions
bd_6cf75313cd35acf8 · schema v1 · pii pii-v1
Full breach record for Shields Health Solutions →Shields Health Care Group, Inc. filed a supplemental notice with the New Hampshire Attorney General regarding a data breach affecting approximately 8,181 NH residents. An unknown actor accessed systems between March 7 and March 21, 2022. Data compromised included SSNs, PHI, and patient identifiers. Shields engaged forensic specialists, notified law enforcement, rebuilt systems, and offered 24 months of credit monitoring. The investigation was ongoing at the time of filing.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2e845bf7be75aac1Washington State AGfiled 2022-07-22(4d gap)Candidate
- bd_31e1580fc13fc22aCalifornia State AGfiled 2022-07-22(4d gap)Verified
- bd_9109906827c3157eMontana State AGfiled 2022-07-22(4d gap)Verified
- bd_9fcea963280901efOregon State AGfiled 2022-07-22(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/shields-health-care-20220726.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 26, 2022
- Raw hash
- fd449e64c9c5fcc030780e172bd88dcf4c773ddf5ab9cf262194ad2105f60511
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Shields Health Solutionsnorm: shields health
- Domain
- shieldshealthsolutions.com
Incident
- Discovered
- Mar 28, 2022
- Materiality determined
- —
- Notification sent
- Jul 25, 2022
- Affected individuals
- 8,181
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotified the U.S. Department of Health and Human ServicesProvided written notice to relevant state and federal regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 weeks(120 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.