HackingVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedPIIIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Your Patient Advisor by Captify Health
bd_78420314833109b8 · schema v1 · pii pii-v1
Full breach record for Your Patient Advisor by Captify Health →Your Patient Advisor by Captify Health notified the NH AG of a data security incident where its online ordering platform was compromised. The breach exposed names, addresses, DOBs, and full payment card details (including CVV) of 19 NH residents. The company engaged forensic investigators, notified affected individuals, and established a call center.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_c0fb5a5e9c1a0c99California State AGfiled 2022-12-22Verified
- bd_d2a62c54889c4e2bMaine State AGfiled 2022-12-22Verified
- bd_f777f29d18672117Washington State AGfiled 2022-12-22Verified
- bd_42009594f256a9ffMontana State AGfiled 2022-12-16(6d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/your-patient-advisor-captify-health-20221222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2022
- Raw hash
- 86629cb2bb2574505ba9166ff11f5cf3570497d2964a81896c140364e1ff6fb3
Reporting entity
- Name
- Your Patient Advisor by Captify Healthnorm: your patient advisor by captify health
Victim entity
- Name
- Your Patient Advisor by Captify Healthnorm: your patient advisor by captify health
Incident
- Discovered
- Mar 1, 2021
- Materiality determined
- Oct 13, 2022
- Notification sent
- Dec 16, 2022
- Affected individuals
- 19
- Data types
- PIIIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 22 months(661 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.