MalwareHealthcareHealthcareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

TriValley Primary Care

bd_d568aa2fb9b57c25 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 11, 2021

Filed

Nov 29, 2021

To disclose

7 weeks

Affected

11state residents only

Linked

9 records

Confidence

67%

Full breach record for TriValley Primary Care →

TriValley Primary Care notified the New Hampshire Attorney General of a ransomware incident discovered on October 11, 2021, affecting 11 NH residents. The breach exposed demographic, government ID (SSN), clinical, and financial data. The organization engaged forensic experts and the FBI, contained the threat, and provided credit monitoring to affected individuals. Notification was sent on November 24, 2021.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 7 weeks / 49 days

Oct 11, 2021

Discovered

Nov 29, 2021

Filed

vs. sector median

2 wks faster

This filing is one of 9 records about the same incident.View merged incident

A leak claim by groove about this victim was first seen 38 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitegroovebd_8f00d88f589e8adc2021-10-22 · +38dVerified by operator

Regulatory filings (7) · sorted by filing gap

Indiana State AGbd_28314db61f2a77272021-11-24 · +5dVerified by operator
Massachusetts State AGbd_5493e351799774fd2021-11-23 · +6dVerified by operator
Maine State AGbd_a109c87c50e4d2872021-11-23 · +6dVerified
HHS OCRbd_a1e10af133af49312021-11-23 · +6dVerified

Show 3 more filings ↓up to 42d gap

Montana State AGbd_db12c7445a73ebb62021-11-23 · +6dVerified
Maine State AGbd_c3d99a75329756c92022-01-06 · +38dVerified
New Hampshire State AGbd_73d56fd3791115e52022-01-10 · +42dVerified by operator

Name: Whiteford, Taylor & Preston LLP
norm: whiteford taylor preston
Domain: whitefordlaw.com

Name: TriValley Primary Care
norm: trivalley primary care
Domain: trivalleypc.com
Industry: Healthcarellm

Discovered: Oct 11, 2021
Materiality determined: —
Notification sent: Nov 24, 2021
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the Attorney General of New HampshireNotified applicable government regulators

During the incident: Engaged outside counsel and third-party forensic experts to assist in the remediation efforts and conduct a thorough investigation
Contacted the FBI to seek assistance and guidance
Mailed a written notification pursuant to N.H. Rev. State § 359-C:19
Provided free access to credit monitoring services for one year through Sontiq
Notified the three major credit reporting agencies and applicable government regulators
Changes made: Implementing additional safeguards to its existing cybersecurity infrastructure
Enforcing MFA enterprise wide
Utilizing EDR
Enhancing employee cybersecurity training
Working to improve its cybersecurity policies, procedures and protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 6 states

View merged incident ↗

Massachusetts State AGNov 23 · first

Maine State AGNov 23 · first

HHS OCRNov 23 · first

Montana State AGNov 23 · first

Indiana State AG+1d

New Hampshire State AG+6d · this page

Maine State AG+44d

New Hampshire State AG+48d

Pattern: first filing Nov 23 (MA), last Jan 10 (NH) — a 48-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/trivalley-primary-care-20211129.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 29, 2021
Raw hash: 2eff8501a369e676d1422de0d095899ab0a38ae7b1478bcac3f2b11672eebcdf

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entityWhiteford, Taylor & Preston LLP

Victim entityTriValley Primary Care

Incidentdiscovered Oct 11, 2021

Stated responseEngaged outside counsel and third-party forensic experts to assist in the remediation efforts and conduct a thorough investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov