MalwareHealthcareFinancial ServicesHealthcareRansomwareData ExfiltratedData EncryptedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Law Enforcement Health Benefits, Inc.

bd_a8e1792666a08b2b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 14, 2021

Filed

Mar 31, 2022

To disclose

28 weeks

Affected

9state residents only

Linked

4 filings

Confidence

67%

Full breach record for Law Enforcement Health Benefits, Inc. →2 incidents on file

Law Enforcement Health Benefits, Inc. (LEHB) notified the NH Attorney General on March 31, 2022, of a ransomware incident detected on September 14, 2021. The attack encrypted files and resulted in the exfiltration of personal information, including names, DOBs, SSNs, medical record numbers, and health insurance info, affecting 9 NH residents. LEHB engaged external cybersecurity professionals and provided 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 weeks / 198 days

Sep 14, 2021

Discovered

Mar 31, 2022

Filed

vs. sector median

+16 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

HHS OCRbd_a175222b967930752022-03-28 · +3dVerified
Montana State AGbd_c9e6f787d8763d412022-03-28 · +3dVerified
Illinois State AGbd_10e503dd60a73ad72022-01-01 · +89dCandidate

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: Law Enforcement Health Benefits, Inc.
norm: law enforcement health benefits
Industry: HealthcarellmFinancial Servicesllm

Discovered: Sep 14, 2021
Materiality determined: —
Notification sent: Mar 28, 2022
Affected individuals: 9state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notification has also been provided to the U.S. Department of Health & Human Services Office for Civil Rights

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Providing the affected residents with notification of this incident
Providing the affected residents with impacted Social Security numbers with 12 months of complimentary credit monitoring services
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(198 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Illinois State AGJan 1 · first

HHS OCR+86d

Montana State AG+86d

New Hampshire State AG+89d · this page

Pattern: first filing Jan 1 (IL), last Mar 31 (NH) — a 89-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/law-enforcement-health-benefits-20220331.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 31, 2022
Raw hash: 2da10e5dede576ad6515de7ef275cb3085e3ff4902c60541112d6b24dd8d841d

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityLaw Enforcement Health Benefits, Inc.

Incidentdiscovered Sep 14, 2021

Stated responseCommenced a prompt and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov