MalwareHealthcareHealthcareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Health (basic)Financial accountLowContained

Extend Fertility

bd_91746a5a8510fdd5 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 20, 2021

Filed

Feb 22, 2022

To disclose

9 weeks

Affected

4state residents only

Linked

6 filings

Confidence

66%

Full breach record for Extend Fertility →

Extend Fertility, a medical organization, notified the New Hampshire Attorney General of a ransomware incident discovered on December 20, 2021. Unauthorized access occurred on or about December 15, 2021. The breach affected 4 New Hampshire residents, exposing demographic, clinical, and financial information. Extend Fertility engaged forensic experts, notified the FBI, and provided credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 9 weeks / 64 days

Dec 15, 2021

Begins

Dec 20, 2021

Discovered

Feb 22, 2022

Filed

vs. sector median

3 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

HHS OCRbd_52de3d14d7ada3112022-02-16 · +6dCandidate
Maine State AGbd_61ee999293fbe9762022-02-16 · +6dVerified
Indiana State AGbd_694b6b9dfef716f22022-02-16 · +6dVerified
Massachusetts State AGbd_73244bfef76f122b2022-02-16 · +6dVerified

Show 1 more filing ↓up to 6d gap

South Carolina State AGbd_a6bc96cc7d05b60a2022-02-16 · +6dVerified

Name: Whiteford, Taylor & Preston LLP
norm: whiteford taylor preston
Domain: whitefordlaw.com

Name: Extend Fertility
norm: extend fertility
Domain: extendfertility.com
Industry: Healthcarellm

Discovered: Dec 20, 2021
Breach occurred: Dec 15, 2021
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 16, 2022
Affected individuals: 4state-resident count only
Data types: Identity (basic)Health (basic)Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Provided notice to the applicable government regulators, officials, and other Attorneys General

During the incident: Engaged outside counsel and third-party forensic experts to assist in the remediation efforts and conduct a thorough investigation
Contacted the FBI to seek assistance and guidance
Secured and safely restored its systems and operations
Mailed written notification to potentially affected New Hampshire residents
Provided free access to credit monitoring services for one year through Cyberscout
Changes made: Implementing additional safeguards to existing cybersecurity infrastructure
Enhancing employee cybersecurity training
Working with cybersecurity experts to improve cybersecurity policies, procedures, and protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(64 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

HHS OCRFeb 16 · first

Maine State AGFeb 16 · first

Indiana State AGFeb 16 · first

Massachusetts State AGFeb 16 · first

South Carolina State AGFeb 16 · first

New Hampshire State AG+6d · this page

Pattern: first filing Feb 16 (NY), last Feb 22 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/extend-fertility-20220222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 22, 2022
Raw hash: ac8d946ae629f0d5df11208a623fca9a5147e483b90c4766124fe834d85f6b3a

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityWhiteford, Taylor & Preston LLP

Victim entityExtend Fertility

Incidentdiscovered Dec 20, 2021

Stated responseEngaged outside counsel and third-party forensic experts to assist in the remediation efforts and conduct a thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov