MalwareOtherRansomwareRansom DemandedData EncryptedIdentity (basic)Government IDPHIHealth (basic)MediumContained

RISE Wisconsin, Inc.

bd_ab0882a7d81b06d8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 8, 2018

Filed

Jun 7, 2018

To disclose

9 weeks

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for RISE Wisconsin, Inc. →

RISE Wisconsin, Inc. notified NH AG of a ransomware attack discovered on April 8, 2018. Systems were taken offline and forensic experts engaged. While no evidence of access was found, personal info (names, addresses, DOB, SSN, PHI) may have been compromised. One NH resident was notified on June 7, 2018, offered 12 months of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 60 days

Apr 8, 2018

Discovered

Jun 7, 2018

Filed

vs. sector median

on median

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_98eee72bc416b2942018-06-07Verified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: RISE Wisconsin, Inc.
norm: rise wisconsin
Industry: Otherllm

Discovered: Apr 8, 2018
Materiality determined: —
Notification sent: Jun 7, 2018
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Took its systems offline
Engaged independent computer forensics experts
Restricted access to its network
Increasing staff training regarding information security
Provided potentially impacted individuals with identity theft restoration and credit monitoring services for 12 months at no cost to the individual, through Kroll
Notice is also being provided to the credit reporting agencies
Notified law enforcement and are cooperating with their investigation
Changes made: Restricting access to its network
Increasing staff training regarding information security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

HHS OCRJun 7 · first

New Hampshire State AGJun 7 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/rise-wisconsin-20180614.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 7, 2018
Raw hash: 20aa0cf4e938c684b2fb4e477fe15d66fef7bf902bb8882ea97cad9f67d11b2b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityRISE Wisconsin, Inc.

Incidentdiscovered Apr 8, 2018

Stated responseTook its systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov