MalwareHealthcareRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)AuthenticationMediumContained

Harbor Homes

bd_93b16c19b8d022a8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 28, 2020

Filed

Jul 23, 2020

To disclose

8 weeks

Affected · nationwide

43 in this filing

Confidence

67%

Full breach record for Harbor Homes →2 incidents on file

Harbor Homes experienced a ransomware incident on May 28, 2020, resulting in the potential exposure of personal information for four individuals, including three New Hampshire residents. Affected data included names, addresses, dates of birth, driver's license numbers, passport numbers, social security numbers, and prescription drug provider information. Harbor Homes changed passwords, improved security settings, and offered one year of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 56 days

May 28, 2020

Discovered

Jul 23, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: Harbor Homes
norm: harbor homes

Name: Harbor Homes
norm: harbor homes

Discovered: May 28, 2020
Materiality determined: —
Notification sent: Jul 24, 2020
Affected individuals: 4state + nationwide
Data types: Identity (basic)Government IDHealth (basic)Authentication
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Notified Attorney General Gordon J. MacDonald

During the incident: Immediately changed all computer passwords
Improved its computer security setting
Arranged for the impacted individuals to enroll in Equifax Credit Watch Gold
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/harbor-homes-20200723.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 23, 2020
Raw hash: b1c47eb79d3a7e4fc5726e2f43db75425a0223495c2e368e6343d74ad494a5de

Reporting entityHarbor Homes

Victim entityHarbor Homes

Incidentdiscovered May 28, 2020

Stated responseImmediately changed all computer passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov