Ravkoo
bd_d90f0cc5f913c2be · schema v1 · pii pii-v1
Full breach record for Ravkoo →Ravkoo, a digital SaaS platform for prescription fulfillment, notified the New Hampshire Attorney General of a cybersecurity incident on its AWS-hosted cloud prescription portal. The incident, occurring on September 27, 2021, involved an unauthorized third party attempting to infiltrate the system. The breach potentially exposed limited prescription and health information, as well as personal data (name, address, phone) for 600 New Hampshire residents. No Social Security Numbers were compromised. Ravkoo engaged forensic specialists, enhanced security policies, and provided one year of free identity monitoring to affected individuals.
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_4b4f4f311c81eaeeWashington State AGfiled 2022-01-03Candidate
- bd_d601b80a96140270California State AGfiled 2022-01-03Verified
- bd_e92fcd9fc02d394aMontana State AGfiled 2022-01-03Verified
- bd_b1c21d4401605dcbSouth Carolina State AGfiled 2022-01-04(1d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 2d gap
- bd_e271be692c34e932Oregon State AGfiled 2022-01-05(2d gap)Verified
- bd_e4f82f363cdb1218Maine State AGfiled 2022-01-05(2d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/ravkoo-20220103.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 3, 2022
- Raw hash
- c3fddd3fb92747959c7c5ae6de8eaf4f986c5028650cb2a7d6f13d78455eeba1
Reporting entity
- Name
- Wilson, Elser, Moskowitz, Edelman & Dicker LLPnorm: wilson elser moskowitz edelman dicker
Victim entity
- Name
- Ravkoonorm: ravkoo
Incident
- Discovered
- Sep 27, 2021
- Materiality determined
- —
- Notification sent
- Jan 3, 2022
- Affected individuals
- 600
- Data types
- HEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(98 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.