HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedPIIIDENTITY_BASICLowContained

Navvis & Company, LLC

bd_c1942c40dd4a3a2a · schema v1 · pii pii-v1

Full breach record for Navvis & Company, LLC →

Navvis & Company, LLC, a provider of health management services, disclosed a data breach affecting 255 New Hampshire residents. Unauthorized access occurred between July 12 and July 25, 2023. Navvis detected suspicious activity on July 25, 2023, and notified law enforcement, HHS, and state regulators. Affected individuals received credit monitoring services.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_a130e687bb61da4cCalifornia State AGfiled 2024-02-09Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/navvis-company-20240209.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 9, 2024
Raw hash: b2b2461d00aa18e20b877e7f77d99c73fde2c3e9a75d68120be0e6b54489a718

Reporting entity

Name: Navvis & Company, LLC
norm: navvis

Victim entity

Name: Navvis & Company, LLC
norm: navvis

Incident

Discovered: Jul 25, 2023
Materiality determined: —
Notification sent: Sep 22, 2023
Affected individuals: 255
Data types: PIIIDENTITY_BASIC
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: notified federal law enforcement regarding the eventproviding written notice of this incident to relevant state regulators, as necessarynotified the U.S. Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act (HIPAA)
Initial access: valid_credentials

Compliance

Time to disclose: 28 weeks(199 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.