HackingHealthcareHealthcareDelayed DiscoveryIdentity (basic)Government IDFinancial accountHealth (basic)AuthenticationBiometricMediumActive

Salud Family Health

bd_7ff989410ce09e1f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 5, 2022

Filed

Nov 10, 2022

To disclose

9 weeks

Affected

27state residents only

Linked

9 records

Confidence

66%

Full breach record for Salud Family Health →

Salud Family Health notified the NH AG of unauthorized access to systems between Sept 5-6, 2022. 27 NH residents affected. Data included PII, SSN, medical info, and credentials. Investigation ongoing with forensic help. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 66 days

Sep 5, 2022

Begins

Sep 5, 2022

Discovered

Nov 10, 2022

Filed

vs. sector median

on median

This filing is one of 9 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelorenzbd_bf87056eb87693e42022-11-14 · +4dVerified by operator

Regulatory filings (7) · sorted by filing gap

Indiana State AGbd_4d6856db21f275572022-11-04 · +6dVerified by operator
Maine State AGbd_4ec23cde9041fb352022-11-04 · +6dVerified
Oregon State AGbd_63bad60e15727e212022-11-04 · +6dVerified
California State AGbd_94319bbf584155702022-11-04 · +6dVerified

Show 3 more filings ↓up to 36d gap

Massachusetts State AGbd_b0ae73801a16966a2022-11-04 · +6dVerified by operator
Montana State AGbd_f2c926b99f80daba2022-11-04 · +6dVerified
HHS OCRbd_a5d5502d031d801e2022-10-05 · +36dVerified by operator

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Salud Family Health
norm: salud family health
Industry: Healthcarellm

Discovered: Sep 5, 2022
Breach occurred: Sep 5, 2022 – Sep 6, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 4, 2022
Affected individuals: 27state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)AuthenticationBiometric
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified law enforcement and is cooperating with its investigationNotifying other required state regulatorsNotifying the U.S. Department of Health and Human Services

During the incident: Launched an investigation with the assistance of third-party forensic investigators
Undertook a comprehensive review of the contents of the impacted files
Moved quickly to investigate and respond to the incident
Assessed the security of Salud systems
Identified potentially affected individuals
Notified law enforcement and is cooperating with its investigation
Notifying other required state regulators
Notifying the U.S. Department of Health and Human Services
Providing access to credit monitoring services for at least twelve (12) months through Kroll
Changes made: Implementing additional safeguards
Implementing employee training to recognize suspicious behaviors
Reviewing and enhancing policies and procedures relating to data privacy and security
Taking steps to prevent a reoccurrence, including increased network security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(66 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

HHS OCROct 5 · first

Indiana State AG+30d

Maine State AG+30d

Oregon State AG+30d

California State AG+30d

Massachusetts State AG+30d

Montana State AG+30d

New Hampshire State AG+36d · this page

Pattern: first filing Oct 5 (CO), last Nov 10 (NH) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/salud-family-health-20221110.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 10, 2022
Raw hash: ef58f069998f5ad387cc2904ec43dbda98bb1b1f111a0bf415e2ba989e45dd76

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entitySalud Family Health

Incidentdiscovered Sep 5, 2022

Stated responseLaunched an investigation with the assistance of third-party forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov