HackingHealthcareHealthcareStolen CredentialsBECWire FraudCustomer Data InvolvedDelayed DiscoveryPHIIdentity (basic)Government IDFinancialHealth (basic)MediumContained

Florida Digestive Health Specialists

bd_9e507c668ab0891f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 16, 2020

Filed

Dec 27, 2021

To disclose

13 months

Affected

21state residents only

Linked

6 filings

Confidence

67%

Full breach record for Florida Digestive Health Specialists →4 incidents on file

Florida Digestive Health Specialists, LLP experienced a data security incident involving unauthorized access to employee email accounts. The incident was discovered on December 16, 2020, when suspicious activity was noted, followed by misrouted funds on December 21, 2020. The breach exposed protected health information (PHI) including names, addresses, SSNs, and medical records for 21 New Hampshire residents. The organization engaged forensic investigators, reset credentials, implemented MFA, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 months / 376 days

Dec 16, 2020

Discovered

Dec 27, 2021

Filed

vs. sector median

+41 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_43339b124f149c6c2021-12-27Verified
Maine State AGbd_712d5b3d2f1de3c42021-12-27Verified
HHS OCRbd_af289138988b1d232021-12-27Verified
Indiana State AGbd_dac3210300c716bd2021-12-27Verified

Show 1 more filing ↓up to 9d gap

Massachusetts State AGbd_e38f5892d6aa6b8e2022-01-05 · +9dVerified

Name: Florida Digestive Health Specialists
norm: florida digestive health specialists

Name: Florida Digestive Health Specialists
norm: florida digestive health specialists
Industry: Healthcarellm

Discovered: Dec 16, 2020
Materiality determined: —
Notification sent: Dec 27, 2021
Affected individuals: 21state-resident count only
Data types: PHIIdentity (basic)Government IDFinancialHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the Attorney General of New Hampshire
Initial access: valid_credentials

During the incident: Engaged Clark Hill PLC to assist in the investigation
Engaged a nationally-recognized, third-party computer forensics firm, Kivu, to further assist in the investigation
Changed passwords
Implemented multi-factor authentication throughout its IT systems
Strengthened password protocols
Reconfigured its firewall
Offered 12 months of credit monitoring and identity protection services through IDX
Changes made: Reset passwords
Enabled multi-factor authentication in our email environment
Re-trained its employees on the proper handling of protected health information
Deployed additional security controls
Strengthened password protocols
Reconfigured our firewall
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(376 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGDec 27 · first

Maine State AGDec 27 · first

HHS OCRDec 27 · first

Indiana State AGDec 27 · first

New Hampshire State AGDec 27 · first · this page

Massachusetts State AG+9d

Pattern: first filing Dec 27 (MT), last Jan 5 (MA) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/florida-digestive-health-specialists-20211227.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 27, 2021
Raw hash: a374bd7b194aec286551608702faecaa71a100f6612272666e0cf1743661539f

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityFlorida Digestive Health Specialists

Victim entityFlorida Digestive Health Specialists

Incidentdiscovered Dec 16, 2020

Stated responseEngaged Clark Hill PLC to assist in the investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov