HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Falcon Healthcare
bd_9df99384637a60dc · schema v1 · pii pii-v1
Full breach record for Falcon Healthcare →Falcon Healthcare (dba Interim Healthcare of Lubbock Texas) disclosed a data breach affecting approximately 4 New Hampshire residents. Unauthorized access occurred between April 29, 2022, and July 3, 2022, when an unknown actor accessed and downloaded patient information. The incident involved PII, government IDs, and financial account data. Falcon engaged forensic specialists, notified law enforcement and HHS, and provided credit monitoring services. Initial notice was sent in October 2022, with supplemental notice to NH residents in April 2024.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1b9b751bb2d66dcbMontana State AGfiled 2024-04-25Candidate
- bd_7ced3c3da5557477Vermont State AGfiled 2024-04-25Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/falcon-healthcare-interim-lubbock-texas-20240425.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 25, 2024
- Raw hash
- ad9cf8315a7e764acd2955e72b8dceda60c16ac078eda56ca133e2a167d2f493
Reporting entity
- Name
- Falcon Healthcarenorm: falcon healthcare
- Domain
- falcon-healthcare.net
Victim entity
- Name
- Falcon Healthcarenorm: falcon healthcare
- Domain
- falcon-healthcare.net
Incident
- Discovered
- Jun 1, 2022
- Materiality determined
- —
- Notification sent
- Oct 9, 2022
- Affected individuals
- 4
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated CollectionT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified U.S. Department of Health and Human Services (HHS)Cooperated with HHS investigationNotified federal law enforcementNotified state privacy regulatorsNotified three major consumer reporting agencies (Equifax, Experian, TransUnion)
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 23 months(694 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.