MalwareHealthcareFinancial ServicesHealthcareRansomwareCapture Stored DataData ExfiltratedData EncryptedRansom DemandedBusiness Associate (HIPAA)Customer Data InvolvedDownstream VictimsPIIPHIIdentity (basic)Health (basic)LowActive

Point32Health

bd_9b8c10e974a8bb9c · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 17, 2023

Filed

Jun 30, 2023

To disclose

11 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for Point32Health →3 incidents on file

Point32Health, a business associate of Health Plans, Inc., experienced a ransomware incident detected on April 17, 2023. Unauthorized access occurred between March 28 and April 17, 2023, resulting in data copying. Affected data includes PII and PHI of HPI subscribers. Point32Health engaged forensic experts, notified law enforcement, and is offering credit monitoring. Investigation was active as of the notice date.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 20 days

discovery → filing · 11 weeks / 74 days

Mar 28, 2023

Begins

Apr 17, 2023

Discovered

May 17, 2023

Scope determined

Jun 30, 2023

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Point32Health
norm: point32health
Domain: point32health.org

Name: Point32Health
norm: point32health
Domain: point32health.org
Industry: HealthcarellmFinancial Servicesllm

Discovered: Apr 17, 2023
Breach occurred: Mar 28, 2023 – Apr 17, 2023
Undetected for: 20 daysoccurrence → discovery
Materiality determined: May 17, 2023
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIPHIIdentity (basic)Health (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified regulators

During the incident: Took their systems offline to contain the threat
Notified law enforcement and regulators
Engaged with third-party cybersecurity experts to conduct a thorough investigation
Changes made: Enhanced its security tools used to scan its networks for malware
Reviewing and enhancing user access protocols
Enhancing vulnerability scanning and prioritizing security improvements
Implementing a new sustainable Endpoint Detection and Response (EDR) security solution
Conducting password resets for administrative accounts
Rebuilding or restoring its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(74 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/point32health-health-plans-20230630.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 30, 2023
Raw hash: 76639e779d560dce0ba4233269e38edae0587615db6fbd5164cd812166b2e08c

Reporting entityPoint32Health

Victim entityPoint32Health

Incidentdiscovered Apr 17, 2023

Stated responseTook their systems offline to contain the threat

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov