Social EngineeringProfessional ServicesProfessional ServicesPhishingData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Provider Reimbursement Consultants, Inc.

bd_a85e35f01bc0dd1d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 1, 2020

Filed

Feb 15, 2022

To disclose

18 months

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Provider Reimbursement Consultants, Inc. →

Reimbursement Consultants, Inc. (RCI) notified the New Hampshire Attorney General of a data security incident involving unauthorized access to an employee email account in September 2020. The breach affected approximately 1 New Hampshire resident, exposing names, SSNs, driver's license numbers, and medical/health insurance information. RCI engaged forensic investigators, secured the account, and reported the incident to the FBI and Louisiana police. Affected individuals received notification letters on February 15, 2022, offering complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 months / 532 days

Sep 1, 2020

Discovered

Feb 15, 2022

Filed

vs. sector median

+56 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_ce3bea7fe0cf7c832022-02-15Verified

Name: Lewis Brisbois Bisgaard & Smith, PLLC
norm: lewis brisbois bisgaard smith

Name: Provider Reimbursement Consultants, Inc.
norm: provider reimbursement consultants
Domain: prc-inc.com
Industry: Professional Servicesllm

Discovered: Sep 1, 2020
Materiality determined: —
Notification sent: Feb 15, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Secured the account and its email environment
Launched an investigation
Engaged a digital forensics firm
Reported this matter to the Federal Bureau of Investigation
Reported this matter to the Jefferson Parish Police Department in Louisiana
Sent notification letters via USPS First Class Mail
Offering complimentary credit monitoring services
Changes made: Initiated measures to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 months(532 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGFeb 15 · first

New Hampshire State AGFeb 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/reimbursement-consultants-20220215.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 15, 2022
Raw hash: dc71139778b28cf95e2d12a0892df46cdc6d5ba18c8d2e7788fba6d0438000a3

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLewis Brisbois Bisgaard & Smith, PLLC

Victim entityProvider Reimbursement Consultants, Inc.

Incidentdiscovered Sep 1, 2020

Stated responseSecured the account and its email environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov