HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
CareTree
bd_97d6f0b94f215758 · schema v1 · pii pii-v1
Full breach record for CareTree →CareTree, Inc. issued a supplemental notice to New Hampshire residents regarding a data breach. Unauthorized access occurred on July 21, 2023, detected on August 16, 2023. The incident involved unauthorized access to personal information of individuals using the CareTree platform. CareTree notified law enforcement, implemented additional cybersecurity measures, and provided credit monitoring services to affected individuals.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_44a69674e55b338cNew Hampshire State AGfiled 2023-12-27(16d gap)Verified
- bd_d3e5a7ef13ce1b8bVermont State AGfiled 2023-12-27(16d gap)Verified
- bd_ab9056e59a633901Maine State AGfiled 2023-12-11(32d gap)Verified
- bd_1f0e8136404e11ceNew Hampshire State AGfiled 2023-12-08(35d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 58d gap
- bd_339db28c04eef715HHS OCRfiled 2023-11-15(58d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/caretree-20240112.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 12, 2024
- Raw hash
- 14a3b3799b8ecad930b7c182a90cc94276d8643e9bcc23bbb7b89ccb8a9b906a
Reporting entity
- Name
- CareTreenorm: caretree
Victim entity
- Name
- CareTreenorm: caretree
Incident
- Discovered
- Aug 16, 2023
- Materiality determined
- Oct 13, 2023
- Notification sent
- Dec 11, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement regarding the eventCooperating with their investigationReporting to regulatory authorities, as required
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 21 weeks(149 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.