Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Boulder Neurosurgical and Spine Associates
bd_a4f5395f3b6e8548 · schema v1 · pii pii-v1
Full breach record for Boulder Neurosurgical and Spine Associates →Boulder Neurosurgical and Spine Associates reported a September 21, 2021 business email compromise affecting 3 New Hampshire residents. Unauthorized access to an email account potentially exposed patient PHI (names, DOB, medical records). No evidence of identity theft was found. Remediation included forensic investigation, patient notification, credit monitoring, and policy reviews.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_da518c6e8335a2afHHS OCRfiled 2021-11-29(3d gap)Verified
- bd_5c38e2e8db59427dMontana State AGfiled 2021-11-24(8d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/boulder-neurosurgical-spine-20211201.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 2, 2021
- Raw hash
- 5a8721e134778f0fd803795c4b841653f5e43ad8866bccebaefc949d3de64b4d
Reporting entity
- Name
- Boulder Neurosurgical and Spine Associatesnorm: boulder neurosurgical and spine associates
Victim entity
- Name
- Boulder Neurosurgical and Spine Associatesnorm: boulder neurosurgical and spine associates
Incident
- Discovered
- Sep 21, 2021
- Materiality determined
- —
- Notification sent
- Nov 24, 2021
- Affected individuals
- 3
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney GeneralNotified other state and federal regulators
- Initial access
- phishing_link
Compliance
- Time to disclose
- 10 weeks(72 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.