HackingHealthcareHealthcareCustomer Data InvolvedPIIIdentity (basic)LowContained

WellLife Network

bd_dbb6a6b4dbd756b4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 7, 2023

Filed

Aug 29, 2024

To disclose

51 weeks

Affected

1state residents only

Linked

7 records

Confidence

65%

Full breach record for WellLife Network →

WellLife Network Inc. reported an unauthorized access event affecting one New Hampshire resident. Suspicious activity was detected on September 7, 2023, covering an intrusion window of August 26–September 7, 2023. The incident involved potential access to personal information. WellLife engaged third-party cybersecurity specialists, notified federal law enforcement, and provided credit monitoring services. Notices were mailed on August 29, 2024.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d51 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 12 days

discovery → filing · 51 weeks / 357 days

Aug 26, 2023

Begins

Sep 7, 2023

Discovered

Aug 29, 2024

Filed

vs. sector median

+42 wks slower

This filing is one of 7 records about the same incident.View merged incident

A leak claim by inc_ransom about this victim was first seen 286 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteinc_ransombd_a6211acab1560c412024-04-16 · +135dVerified by operator
Leak Siteinc_ransombd_219b2d74319621e92023-11-17 · +285dCandidate

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_30bd403b20458af82024-08-29Verified by operator
Indiana State AGbd_c19c11cc5bd63e322024-08-29Verified by operator
Illinois State AGbd_ca25bda593a267f12024-08-01 · +28dVerified by operator
HHS OCRbd_510cc36eff982f0a2023-11-06 · +297dVerified

Name: WellLife Network
norm: welllife network
Domain: welllifenetwork.org

Name: WellLife Network
norm: welllife network
Domain: welllifenetwork.org
Industry: Healthcarellm

Discovered: Sep 7, 2023
Breach occurred: Aug 26, 2023 – Sep 7, 2023
Undetected for: 12 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 29, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Launched an investigation, with the assistance of third-party cybersecurity specialists
Assess the security of WellLife’s network
Notified federal law enforcement
Providing access to credit monitoring and identity restoration services for , through Experian
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this event to relevant state regulators
Notifying the U.S. Department of Health and Human Services
Posting notice on its website
Providing notice to prominent media in New York
Changes made: Reviewing its existing policies and procedures
Implementing additional administrative and technical safeguards to further enhance its security posture
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 51 weeks(357 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

HHS OCRNov 6 · first

Illinois State AG+269d

Massachusetts State AG+297d

Indiana State AG+297d

New Hampshire State AG+297d · this page

Pattern: first filing Nov 6 (NY), last Aug 29 (NH) — a 297-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/welllife-network-20240829.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 29, 2024
Raw hash: 2a7ee2d3d73e190f20339ae7a1a9a0150cce226e542d50043e387ae56b5034ab

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityWellLife Network

Victim entityWellLife Network

Incidentdiscovered Sep 7, 2023

Stated responseLaunched an investigation, with the assistance of third-party cybersecurity specialists

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov