MalwareHealthcareHealthcareRansomwareMazeData EncryptedRansom DemandedTargetedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Affordacare Urgent Care Clinics

bd_d69f6963ad9ff4e2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 3, 2020

Filed

Apr 16, 2020

To disclose

10 weeks

Affected

1state residents only

Linked

8 records

Confidence

68%

Full breach record for Affordacare Urgent Care Clinics →

Supplemental notice to NH AG regarding Affordacare Urgent Care Clinics ransomware incident. Maze ransomware attack occurred ~Feb 1, 2020, discovered Feb 3, 2020. 1 NH resident affected. Data included PHI, SSNs, names, DOBs. Patients notified March 30, 2020; offered 12 months credit monitoring. Systems secured; no longer storing data on internal servers.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d10 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 2 days

discovery → filing · 10 weeks / 73 days

Feb 1, 2020

Begins

Feb 3, 2020

Discovered

Apr 16, 2020

Filed

vs. sector median

+1 wks slower

This filing is one of 8 records about the same incident.View merged incident

A leak claim by maze about this victim was first seen 33 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitemazebd_aea1f7017c6e6c882020-02-01 · +75dVerified by operator
Leak Sitemazebd_c7e0b095f69d82fd2020-02-01 · +75dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_247ce446eefb8f762020-04-14 · +2dVerified by operator
New Hampshire State AGbd_a28d6dcc23a26c882020-04-06 · +10dVerified
HHS OCRbd_2b454b820fe03c352020-03-31 · +16dVerified
Montana State AGbd_8a101551d291139e2020-03-30 · +17dVerified

Show 1 more filing ↓up to 20d gap

Indiana State AGbd_b11b328d83697d722020-03-27 · +20dVerified by operator

Name: MehaffyWeber
norm: mehaffyweber
Domain: mehaffyweber.com

Name: Affordacare Urgent Care Clinics
norm: affordacare urgent care clinics
Industry: Healthcarellm

Discovered: Feb 3, 2020
Breach occurred: Feb 1, 2020
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 30, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: MazeExternalFinancial
Regulator citations: Notified Office of New Hampshire Attorney GeneralFederal Bureau of Investigations is actively investigating

During the incident: Safeguarded its systems in order to prevent further attacks
No longer storing information on internal servers
Notified Federal Bureau of Investigations
Notified local police departments
Notified affected patients
Provided twelve months of credit monitoring services
Provided $1,000,000.00 insurance reimbursement policy
Changes made: No longer storing information on internal servers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(73 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGMar 27 · first

Montana State AG+3d

HHS OCR+4d

New Hampshire State AG+10d

Massachusetts State AG+18d

New Hampshire State AG+20d · this page

Pattern: first filing Mar 27 (IN), last Apr 16 (NH) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/affordacare-urgent-clinics-20200416.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2020
Raw hash: a5f4566547d968bdce57b236f556cdc94c26b7cd0fbf54fd843484e46187c6f1

Linked disclosures

Ransomware claims (2)

Regulatory filings (5) · sorted by filing gap

Reporting entityMehaffyWeber

Victim entityAffordacare Urgent Care Clinics

Incidentdiscovered Feb 3, 2020

Stated responseSafeguarded its systems in order to prevent further attacks

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov