Social EngineeringPhishingStolen CredentialsBECCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
CHC Solutions, Inc.
bd_96cee1d7a940644c · schema v1 · pii pii-v1
Full breach record for CHC Solutions, Inc. →CHC Solutions, Inc. notified Maryland AG of a business email compromise affecting 163 Maryland residents. Unauthorized access to an employee email account occurred Oct 5-10, 2024. Exposed data included names, addresses, DOBs, diagnoses, and health insurance numbers. CHC notified law enforcement, regulators, and affected individuals.
Maryland clock✗ MD AG >90d22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4ea69458916748bcHHS OCRfiled 2025-03-13Candidate
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376550.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 13, 2025
- Raw hash
- f9f57acd063975b6e2e77a3f504a19693e2237eaebce71ea8f6eefc74593005a
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- CHC Solutions, Inc.norm: chc solutions
Incident
- Discovered
- Oct 10, 2024
- Materiality determined
- —
- Notification sent
- Mar 13, 2025
- Affected individuals
- 163
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementNotified relevant regulatory authorities
- Initial access
- phishing_link
Compliance
- Time to disclose
- 22 weeks(154 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.