MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICPHIMediumContained
A New Leaf, Inc.
bd_9293db60da31e5e3 · schema v1 · pii pii-v1
Full breach record for A New Leaf, Inc. →A New Leaf, Inc. notified the New Hampshire Attorney General of a ransomware incident discovered on March 30, 2021. The attack encrypted files and resulted in the exfiltration of personal information, including names, Social Security numbers, and potentially PHI, affecting 2 New Hampshire residents. The organization engaged forensic investigators, implemented endpoint monitoring, and provided 12 months of credit monitoring to affected individuals. Notifications were mailed on December 30, 2021.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_06f4302a57cf9dd8HHS OCRfiled 2021-12-30(4d gap)Verified
- bd_2c7c091fe98f2686Maine State AGfiled 2021-12-30(4d gap)Verified
- bd_b6f649de0381726eMontana State AGfiled 2021-12-30(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/new-leaf-20220103.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 3, 2022
- Raw hash
- 4205f239abf595c5e56b8ecdd723c5aa256ec5e9c69c3f57049d322a3478eceb
Reporting entity
- Name
- A New Leaf, Inc.norm: a new leaf
Victim entity
- Name
- A New Leaf, Inc.norm: a new leaf
Incident
- Discovered
- Mar 30, 2021
- Materiality determined
- —
- Notification sent
- Dec 30, 2021
- Affected individuals
- 2
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICPHI
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 40 weeks(279 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.