HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Navvis & Company, LLC
bd_d714d292e093d169 · schema v1 · pii pii-v1
Full breach record for Navvis & Company, LLC →Navvis & Company, LLC, a healthcare management services provider, disclosed a cybersecurity incident to New Hampshire residents on October 6, 2023. Unauthorized access occurred between July 12 and July 25, 2023, when an actor accessed systems containing personal information. Navvis notified law enforcement, implemented safeguards, and offered credit monitoring. The specific data elements are redacted in the template but likely include identity and government identifiers.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_593a06ed2b96ccf5Vermont State AGfiled 2023-10-06Verified
- bd_094d4ec0bd999e89HHS OCRfiled 2023-09-22(14d gap)Verified
- bd_c4dec81fe3734a90Wisconsin State AGfiled 2023-09-22(14d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/navvis-company-20231006.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 6, 2023
- Raw hash
- ae310d066df0549a8feebc9d049c587833225a4d46f397fd66621d05c7f54a9a
Reporting entity
- Name
- Navvis & Company, LLCnorm: navvis
Victim entity
- Name
- Navvis & Company, LLCnorm: navvis
Incident
- Discovered
- Jul 25, 2023
- Materiality determined
- —
- Notification sent
- Oct 6, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notified federal law enforcement regarding the eventproviding written notice of this incident to relevant state and federal regulatorsnotifying the U.S. Department of Health and Human Services
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.