HackingData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICHighContained
Community Council of Nashua
bd_8e1509eb5f02bb98 · schema v1 · pii pii-v1
Full breach record for Community Council of Nashua →Community Council of Nashua d/b/a Greater Nashua Mental Health (GNMH) notified the NH Attorney General of a data security incident involving a third-party CMHC server. Unauthorized access occurred on or about February 21, 2022. The incident potentially affected 1,067 NH residents, exposing names, birthdates, SSNs, and health data. GNMH engaged forensic investigators, secured data, and notified individuals via mail and website.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_cfc188e37a7d803dMaine State AGfiled 2022-05-04(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/community-council-nashua-dba-greater-nashua-mental-health-20220505.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 5, 2022
- Raw hash
- 05a65830661f75b5ee9ff14f6ef1bc3485fa52558940da5ad720733466448147
Reporting entity
- Name
- Community Council of Nashuanorm: community council of nashua
- Domain
- gnmhc.org
Victim entity
- Name
- Community Council of Nashuanorm: community council of nashua
- Domain
- gnmhc.org
Incident
- Discovered
- Feb 23, 2022
- Materiality determined
- —
- Notification sent
- May 4, 2022
- Affected individuals
- 1,067
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(71 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.