HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
Northern Virginia Oral, Maxillofacial & Implant Surgery
bd_b6944a16454fa9d1 · schema v1 · pii pii-v1
Full breach record for Northern Virginia Oral, Maxillofacial & Implant Surgery →Northern Virginia Oral, Maxillofacial & Implant Surgery (NOVA OMS) notified the New Hampshire Attorney General on March 28, 2024, of a data security incident. An unknown criminal actor gained unauthorized access to NOVA OMS's network between October 3 and 6, 2023. The breach potentially exposed personal information (names, driver's license numbers) and protected health information for 2 New Hampshire residents. NOVA OMS engaged a cybersecurity firm, notified the FBI, and offered credit monitoring services.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9e666493cea86d2eVermont State AGfiled 2024-03-28Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/northern-virginia-oral-maxillofacial-implant-surgery-20240328.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 28, 2024
- Raw hash
- 3f4a6074086e9a530af716c65dcbb5523202a048b4437d911c74e84e4a23229c
Reporting entity
- Name
- Constangy, Brooks, Smith & Prophete, LLPnorm: constangy brooks smith prophete
Victim entity
- Name
- Northern Virginia Oral, Maxillofacial & Implant Surgerynorm: northern virginia oral maxillofacial implant surgery
- Industry
- healthcare
Incident
- Discovered
- Oct 5, 2023
- Materiality determined
- —
- Notification sent
- Mar 28, 2024
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 weeks(175 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.