HackingHealthcareHealthcareDelayed DiscoveryIdentity (basic)Government IDHealth (basic)Financial accountMediumActive

Hand & Upper Extremity Centers

bd_bbe76375b55cb59e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 5, 2017

Filed

Aug 30, 2017

To disclose

8 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for Hand & Upper Extremity Centers →

Hand & Upper Extremity Centers dba Hand Rehabilitation Specialists notified NH AG of a potential network breach discovered July 5, 2017. Affects 2 NH residents. Data may include PII, SSN, PHI, and financial info. Investigation ongoing with FBI/Ventura County Sheriff. No evidence of exfiltration found yet. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 56 days

Jul 5, 2017

Discovered

Aug 30, 2017

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_c3f0f8c0feafa2882017-08-30Verified
HHS OCRthe Dark Overlordbd_22d1640b67afe0bc2017-09-01 · +2dVerified
California State AGbd_63ce212c2d4586222017-09-01 · +2dVerified

Name: Troutman Pepper Hamilton Sanders LLP
norm: troutman pepper hamilton sanders
Domain: troutman.com

Name: Hand & Upper Extremity Centers
norm: hand upper extremity centers
Also named: Hand & Upper Extremity Centersdba oflegal entity
Hand Rehabilitation Specialistsdba oftrade name
Industry: Healthcarellm

Discovered: Jul 5, 2017
Materiality determined: —
Notification sent: Sep 1, 2017
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Ventura County Sheriff's High Tech Task ForceConsultation with the FBINotified applicable state agencies

During the incident: Reported the notice to the Ventura County Sheriffs High Tech Task Force
Began a prompt forensic IT investigation into the matter in consultation with the FBI
Notified all three credit bureaus
Notified the applicable state agencies
Hired IT consultants
Secured identity theft protection services through ID Experts
Actively working with law enforcement
Changes made: Reviewing office policies and procedures to ensure all security measures are taken
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Massachusetts State AGAug 30 · first

New Hampshire State AGAug 30 · first · this page

HHS OCR+2d

California State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hand-upper-20170831.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 30, 2017
Raw hash: 700cd59fcc7d1e721879b60cab9b15a01054c0b365653c404dae4947bbaf29bb

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityTroutman Pepper Hamilton Sanders LLP

Victim entityHand & Upper Extremity Centers

Incidentdiscovered Jul 5, 2017

Stated responseReported the notice to the Ventura County Sheriffs High Tech Task Force

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov