HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Columbus Aesthetic and Plastic Surgery
bd_dfe500e6b9864954 · schema v1 · pii pii-v1
Full breach record for Columbus Aesthetic and Plastic Surgery →Columbus Aesthetic and Plastic Surgery notified the NH AG of a breach discovered on Sept 22, 2023, where an unknown actor gained temporary network access. One NH resident was affected, with potential exposure of SSNs and PII. No EMR access occurred. CAPS notified the FBI and HHS, offered credit monitoring via IDX, and secured its network.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8a13ac81d5266696Montana State AGfiled 2024-02-09Candidate
- bd_9cbecbfc25c4bddfIndiana State AGfiled 2024-02-07(2d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/columbus-aesthetic-plastic-surgery-20240209.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 9, 2024
- Raw hash
- 2b0d2677a6dd3b1adc5c02f660441ac0ed1749c017bd036ed073deb90371bada
Reporting entity
- Name
- Columbus Aesthetic and Plastic Surgerynorm: columbus aesthetic and plastic surgery
Victim entity
- Name
- Columbus Aesthetic and Plastic Surgerynorm: columbus aesthetic and plastic surgery
Incident
- Discovered
- Sep 22, 2023
- Materiality determined
- Dec 22, 2023
- Notification sent
- Feb 7, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of InvestigationNotified Department of Health and Human Services
Compliance
- Time to disclose
- 20 weeks(140 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.