MalwareRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIALMediumContained
National Association of Community Health Centers
bd_80c9fe2c0113f867 · schema v1 · pii pii-v1
Full breach record for National Association of Community Health Centers →National Association of Community Health Centers (NACHC) notified the New Hampshire Attorney General on January 7, 2022, of a cyberattack affecting two NH residents. Threat actors gained access around October 4, 2021, and encrypted servers (ransomware). Employee PII (SSNs, names, DOB, salary) was stored on compromised servers. NACHC engaged forensic investigators, notified law enforcement (FBI/DHS), and is offering 24 months of credit monitoring. No evidence of data exfiltration was found.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_3e77cb306d9cd7b4Maine State AGfiled 2022-01-07Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/national-association-community-health-centers-20220107.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 7, 2022
- Raw hash
- bd2404526ea53e85071b7251e3cf29d05091e394fa40113c67e5ee133b43096c
Reporting entity
- Name
- Feldesman Tucker Leifer Fidell LLPnorm: feldesman tucker leifer fidell
Victim entity
- Name
- National Association of Community Health Centersnorm: national association of community health centers
Incident
- Discovered
- Oct 5, 2021
- Materiality determined
- —
- Notification sent
- Jan 10, 2022
- Affected individuals
- 2
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(94 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.