MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Harvard Pilgrim Health Care
bd_75a606d40f78de2e · schema v1 · pii pii-v1
Full breach record for Harvard Pilgrim Health Care →Harvard Pilgrim Health Care, a subsidiary of Point32Health, issued a supplemental notice regarding a ransomware incident discovered on April 17, 2023. The attack occurred between March 28 and April 17, 2023, resulting in the encryption of systems and exfiltration of personal information, including names, SSNs, and dates of birth. Approximately 1,347 Rhode Island residents were identified as potentially affected. The company took systems offline, engaged forensic experts, and offered two years of credit monitoring.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_2cfb222c1f723d12New Hampshire State AGfiled 2024-02-15Verified
- bd_718a015221cd2671California State AGfiled 2024-02-15Verified
- bd_9dcb7294e442d8b9Maine State AGfiled 2024-02-15Verified
- bd_6228e5282fce1211Maine State AGfiled 2024-03-27(41d gap)Verified
Show 4 more filings ↓Show fewer ↑up to 41d gap
- bd_653dd03a96a63057Delaware State AGfiled 2024-03-27(41d gap)Verified
- bd_c229892302105957New Hampshire State AGfiled 2024-03-27(41d gap)Verified
- bd_dbc80eaf19d4bfa1California State AGfiled 2024-03-27(41d gap)Verified
- bd_e3cbbfda0c66639bVermont State AGfiled 2024-03-27(41d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2024/02/Harvard-Pilgrim-Health-Care-Supplemental-Notice-of-Data-Event-DE-1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 15, 2024
- Raw hash
- 2c58c32f8f20984866cb0936c2a6b749e17e2aefd5d573bca813b8f913f3cd75
Reporting entity
- Name
- Point32Healthnorm: point32health
- Domain
- point32health.org
Victim entity
- Name
- Harvard Pilgrim Health Carenorm: harvard pilgrim health care
- Domain
- point32health.org
Incident
- Discovered
- Apr 17, 2023
- Materiality determined
- Jan 4, 2024
- Notification sent
- Feb 15, 2024
- Affected individuals
- 1,347
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified regulators
Compliance
- Time to disclose
- 43 weeks(304 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.