MalwareHealthcareHealthcareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Seeley Enterprises Company dba Seeley Medical

bd_acbc5a685b62b7d4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 7, 2020

Filed

Nov 12, 2020

To disclose

9 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for Seeley Enterprises Company dba Seeley Medical →

Seeley Enterprises Company dba Seeley Medical notified the New Hampshire Attorney General of a data event affecting two NH residents. Unauthorized access occurred between August 31 and September 7, 2020, involving malware infection and file exfiltration. Affected data included names, SSNs, and medical records. Seeley engaged forensic specialists, notified residents, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 9 weeks / 66 days

Aug 31, 2020

Begins

Sep 7, 2020

Discovered

Nov 12, 2020

Filed

vs. sector median

2 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

HHS OCRbd_3e7431727caca3af2020-11-06 · +6dCandidate
Massachusetts State AGbd_840fb5d83cf50fd62020-11-06 · +6dCandidate
Indiana State AGbd_be4b4d9e2bea37522020-11-06 · +6dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Seeley Enterprises Company dba Seeley Medical
norm: seeley enterprises company dba seeley medical
Also named: Seeley Enterprises Companydba oflegal entity
Seeley Medicaldba oftrade name
Industry: Healthcarellm

Discovered: Sep 7, 2020
Breach occurred: Aug 31, 2020 – Sep 7, 2020
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 6, 2020
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Medical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Launched an investigation, with the assistance of third-party computer forensic specialists
Provided written notice of this incident to all affected individuals
Providing access to credit monitoring services for 12 months, through Transunion to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Working to implement additional safeguards and training to its employees
Reviewing our policies, procedures, and processes related to storage of and access to personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(66 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

HHS OCRNov 6 · first

Massachusetts State AGNov 6 · first

Indiana State AGNov 6 · first

New Hampshire State AG+6d · this page

Pattern: first filing Nov 6 (OH), last Nov 12 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/seeley-medical-enterprises-20201112.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2020
Raw hash: 527c87131a36ab18166e80cbfcc339f9d2cd62c5fce42bb6b36f7c07707de65f

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entitySeeley Enterprises Company dba Seeley Medical

Incidentdiscovered Sep 7, 2020

Stated responseLaunched an investigation, with the assistance of third-party computer forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov