HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIFINANCIAL_ACCOUNTLowContained
PCHP Medical Services Organization LLP
bd_91c120ff97a43b3f · schema v1 · pii pii-v1
Full breach record for PCHP Medical Services Organization LLP →PCHP Medical Services Organization LLP notified the New Hampshire Attorney General on April 26, 2024, of a data security incident involving its payroll provider. The breach was discovered on March 24, 2024, when unusual activity was detected in the provider's online platform. The incident resulted in unauthorized access to payroll information for 3 New Hampshire residents. PCHP-MSO offered complimentary identity protection services and implemented additional security measures.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_60043c4973eefafcVermont State AGfiled 2024-04-26Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/pchp-medical-services-organization-20240426.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 26, 2024
- Raw hash
- d4d9983b42d7fb63fab4c12941e57a5146c20bcbd6db9801c3fd486f93af595e
Reporting entity
- Name
- PCHP Medical Services Organization LLPnorm: pchp medical services organization
Victim entity
- Name
- PCHP Medical Services Organization LLPnorm: pchp medical services organization
Incident
- Discovered
- Mar 24, 2024
- Materiality determined
- —
- Notification sent
- Apr 26, 2024
- Affected individuals
- 3
- Data types
- PIIFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- supply_chain
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.