HackingHealthcareHealthcareCustomer Data InvolvedPIIIdentity (basic)LowContained

Consulting Radiologists

bd_c2b65bb4577a6417 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 12, 2024

Filed

Jun 18, 2024

To disclose

18 weeks

Affected

28state residents only

Linked

14 records

Confidence

67%

Full breach record for Consulting Radiologists →

Consulting Radiologists LTD. notified the NH Attorney General of a cybersecurity incident discovered on Feb 12, 2024. Unauthorized access to network files potentially impacted 28 NH residents. Data types included PII. CRL engaged forensic investigators, secured the network, and offered 12 months of credit monitoring. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d18 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 18 weeks / 127 days

Feb 12, 2024

Discovered

Jun 18, 2024

Filed

vs. sector median

+9 wks slower

This filing is one of 14 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 41 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Montana State AGbd_2e90566000a585002024-06-14 · +4dVerified by operator
California State AGbd_65730f74869a357a2024-06-14 · +4dVerified by operator
Massachusetts State AGbd_a8a23b8b48b32fd52024-06-14 · +4dVerified by operator
HHS OCRbd_c3bdfc4c8390e5cf2024-06-14 · +4dVerified by operator

Show 6 more filings ↓up to 70d gap

Maine State AGbd_ce63da405a317bbf2024-06-14 · +4dVerified by operator
Indiana State AGbd_eb428a7c019b32512024-06-14 · +4dVerified
Vermont State AGbd_8996de206fe6cdd52024-07-16 · +28dVerified by operator
New Hampshire State AGbd_e1f9d17e915d51d42024-07-22 · +34dVerified by operator
California State AGbd_50ea62962f6053f12024-08-27 · +70dVerified by operator
Maine State AGbd_daa30c9ef32cdbca2024-08-27 · +70dVerified by operator

Showing first 10 of 13 linked disclosures.

Name: Wilson Elser Moskowitz Edelman and Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: consultingsuccess.com

Name: Consulting Radiologists
norm: consulting radiologists
Domain: consultingradiologists.com
Industry: Healthcarellm

Discovered: Feb 12, 2024
Materiality determined: —
Notification sent: Jun 14, 2024
Affected individuals: 28state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau

During the incident: Engaged a specialized cybersecurity firm to investigate the nature and scope of the incident
Secured its network
Offered 12 months of complimentary credit monitoring and identity theft restoration services
Notified applicable regulators
Changes made: Reviewing and enhancing its existing policies and procedures related to data privacy
Deployed additional monitoring tools
Enhancing the security of its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(127 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 8 states

View merged incident ↗

Montana State AGJun 14 · first

California State AGJun 14 · first

Massachusetts State AGJun 14 · first

HHS OCRJun 14 · first

Maine State AGJun 14 · first

Indiana State AGJun 14 · first

New Hampshire State AG+4d · this page

Vermont State AG+32d

New Hampshire State AG+38d

California State AG+74d

Maine State AG+74d

Pattern: first filing Jun 14 (MT), last Aug 27 (ME) — a 74-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/consulting-radiologists-20240618.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 18, 2024
Raw hash: 23995edbe59e336509da76c52f4c3fb7aee4d542d1191e5ffc8e88ed804adcaa

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityWilson Elser Moskowitz Edelman and Dicker LLP

Victim entityConsulting Radiologists

Incidentdiscovered Feb 12, 2024

Stated responseEngaged a specialized cybersecurity firm to investigate the nature and scope of the incident

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov