Social EngineeringHealthcareHealthcarePhishingRansom DemandedData ExfiltratedIdentity (basic)Government IDFinancialMediumContained

CareCentrix

bd_df351fd22bc591a3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 7, 2016

Filed

Mar 21, 2016

To disclose

14 days

Affected

2state residents only

Linked

2 filings

Confidence

65%

Full breach record for CareCentrix →3 incidents on file

CareCentrix, Inc. notified the New Hampshire Attorney General of a phishing incident where an employee emailed W-2 forms containing SSNs and income data to an unauthorized recipient on Feb 24, 2016. Discovered March 7, 2016. Notices sent March 21, 2016. Affected ~2 NH residents. FBI/IRS notified. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 12 days

discovery → filing · 14 days

Feb 24, 2016

Begins

Mar 7, 2016

Discovered

Mar 21, 2016

Filed

vs. sector median

10 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_cdc994762e445e032016-03-22 · +1dVerified

Name: CareCentrix
norm: carecentrix
Domain: carecentrix.com

Name: CareCentrix
norm: carecentrix
Domain: carecentrix.com
Industry: Healthcarellm

Discovered: Mar 7, 2016
Breach occurred: Feb 24, 2016
Undetected for: 12 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 21, 2016
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Contacted federal law enforcement at the FBI and IRSAsked the IRS to flag affected social security numbers
Initial access: phishing_link

During the incident: Contacted federal law enforcement at the FBI and IRS
Asked the IRS to flag affected social security numbers to deter fraudulent tax returns
Internally notified employees of the incident
Notifying all potentially affected current and former employees in a formal letter
Offering free credit monitoring services with identity repair and protection services from AllClearID for two years
Changes made: Offering free credit monitoring services with identity repair and protection services from AllClearID for two years
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 days(14 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMar 21 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/carecentrix-20160321.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 21, 2016
Raw hash: 81e9745a04f8a1de1446499be095beb31346134b277e398ee407512838ded51b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCareCentrix

Victim entityCareCentrix

Incidentdiscovered Mar 7, 2016

Stated responseContacted federal law enforcement at the FBI and IRS

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov