Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Florida Digestive Health Specialists
bd_9e507c668ab0891f · schema v1 · pii pii-v1
Full breach record for Florida Digestive Health Specialists →Florida Digestive Health Specialists, LLP (FDHS) notified the New Hampshire Attorney General on December 27, 2021, of a phishing incident affecting 21 NH residents. Unauthorized users accessed employee email accounts starting December 16, 2020, leading to misrouted funds and exposure of patient PHI (names, SSNs, DOB, medical info). FDHS engaged forensic firm Kivu, reset passwords, implemented MFA, and offered 12 months of credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_43339b124f149c6cMontana State AGfiled 2021-12-27Candidate
- bd_712d5b3d2f1de3c4Maine State AGfiled 2021-12-27Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/florida-digestive-health-specialists-20211227.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 27, 2021
- Raw hash
- a374bd7b194aec286551608702faecaa71a100f6612272666e0cf1743661539f
Reporting entity
- Name
- Florida Digestive Health Specialistsnorm: florida digestive health specialists
Victim entity
- Name
- Florida Digestive Health Specialistsnorm: florida digestive health specialists
Incident
- Discovered
- Dec 16, 2020
- Materiality determined
- —
- Notification sent
- Dec 27, 2021
- Affected individuals
- 21
- Data types
- PHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Office of the Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 13 months(376 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.