MalwareHealthcareTechnologyHealthcareRansomwareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

Health Management Concepts, Inc.

bd_ce92c498079cac1c · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 16, 2018

Filed

Aug 20, 2018

To disclose

5 weeks

Affected · nationwide

2,5874 in this filing

Linked

4 filings

Confidence

67%

Full breach record for Health Management Concepts, Inc. →3 incidents on file

Health Management Concepts, Inc. (HMC) notified the NH AG of a ransomware incident discovered July 16, 2018. Attackers encrypted a file-sharing server and inadvertently received a file containing names, SSNs, and health insurance info for 2,587 individuals (4 NH residents). HMC decrypted files, engaged forensic investigators, and offered 1 year of credit monitoring. Remediation included removing RDP access and migrating servers.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 35 days

Jul 16, 2018

Discovered

Aug 20, 2018

Filed

vs. sector median

7 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Oregon State AGbd_12623a169504c70a2018-08-22 · +2dCandidate
Montana State AGbd_9b14b35615fc89232018-08-22 · +2dVerified
HHS OCRbd_f4683e2da8db67bf2018-08-22 · +2dVerified

Name: Health Management Concepts, Inc.
norm: health management concepts

Name: Health Management Concepts, Inc.
norm: health management concepts
Industry: HealthcarellmTechnologyllm

Discovered: Jul 16, 2018
Materiality determined: —
Notification sent: Aug 22, 2018
Affected individuals: 2,587state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Took immediate steps to decrypt the files
Provisioned a new server
Began an investigation
Engaged a leading forensic firm
Obtained decryption keys from the attackers
Established a call center
Offered one year of complimentary credit monitoring and identity protection services
Changes made: Adding enhanced security protocols to its current server
Removing access to the server through Remote Desktop Protocol
Migrating its server to another cloud computing service
Reviewed and enhanced its security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGAug 20 · first · this page

Oregon State AG+2d

Montana State AG+2d

HHS OCR+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/health-management--20180820.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 20, 2018
Raw hash: 8f6e91f2c8229c68cfbd57e8edcc4dfcc543add37b7bffc743e6d4deca5b6510

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHealth Management Concepts, Inc.

Victim entityHealth Management Concepts, Inc.

Incidentdiscovered Jul 16, 2018

Stated responseTook immediate steps to decrypt the files

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov