MalwareRansomwareStolen CredentialsData ExfiltratedCustomer Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumActive
Intelligent Business Solutions
bd_995b95f9b104cba3 · schema v1 · pii pii-v1
Full breach record for Intelligent Business Solutions →Intelligent Business Solutions (IBS), a healthcare IT vendor for Riverside Health System, reported a ransomware incident affecting 3 New Hampshire residents. IBS detected suspicious activity on Nov 14, 2022, following unauthorized access between Nov 10-15, 2022. Malware encrypted files, compromising PHI, SSNs, and names. IBS engaged forensic specialists, notified law enforcement and HHS, and offered 24 months of credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0052dff2256b6d64Montana State AGfiled 2023-02-10(4d gap)Verified
- bd_4f47133aa274ad18Montana State AGfiled 2023-02-10(4d gap)Verified
- bd_68b89286d016762aMaine State AGfiled 2023-02-10(4d gap)Verified
- bd_ad78d2f59cff95eaHHS OCRfiled 2023-02-10(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/intelligent-business-solutions-20230214.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2023
- Raw hash
- 6d33d79f1c5d45e3efa8d08de92161b8fafa9716140a11f9d99518ef201eba62
Reporting entity
- Name
- Intelligent Business Solutionsnorm: intelligent business
- Domain
- thesolutions.com
Victim entity
- Name
- Intelligent Business Solutionsnorm: intelligent business
- Domain
- thesolutions.com
Incident
- Discovered
- Nov 14, 2022
- Materiality determined
- —
- Notification sent
- Feb 10, 2023
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementNotified the U.S. Department of Health and Human ServicesProviding written notice of this incident to relevant state and federal regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(92 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.