HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Consulting Radiologists

bd_e1f9d17e915d51d4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 12, 2024

Filed

Jul 22, 2024

To disclose

23 weeks

Affected

29state residents only

Linked

15 filings

Confidence

67%

Full breach record for Consulting Radiologists →

Supplemental New Hampshire AG notice for Consulting Radiologists LTD. regarding a cybersecurity incident discovered on February 12, 2024. An unauthorized actor accessed network files containing sensitive data of 29 NH residents. CRL engaged forensic investigators, offered credit monitoring, and mailed notifications on July 16, 2024. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d23 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 23 weeks / 161 days

Feb 12, 2024

Discovered

Jul 22, 2024

Filed

vs. sector median

+10 wks slower

This filing is one of 15 about the same incident.View merged incident

A leak claim by qilin about this victim predates this filing by 162 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Vermont State AGbd_8996de206fe6cdd52024-07-16 · +6dVerified by operator
New Hampshire State AGbd_c2b65bb4577a64172024-06-18 · +34dVerified by operator
California State AGbd_50ea62962f6053f12024-08-27 · +36dVerified by operator
Maine State AGbd_daa30c9ef32cdbca2024-08-27 · +36dVerified by operator

Show 6 more filings ↓up to 38d gap

Montana State AGbd_2e90566000a585002024-06-14 · +38dVerified by operator
California State AGbd_65730f74869a357a2024-06-14 · +38dVerified by operator
Massachusetts State AGbd_a8a23b8b48b32fd52024-06-14 · +38dVerified by operator
HHS OCRbd_c3bdfc4c8390e5cf2024-06-14 · +38dVerified by operator
Maine State AGbd_ce63da405a317bbf2024-06-14 · +38dVerified by operator
Indiana State AGbd_eb428a7c019b32512024-06-14 · +38dVerified

Showing first 10 of 14 linked disclosures.

Name: Consulting Radiologists
norm: consulting radiologists
Domain: consultingradiologists.com

Name: Consulting Radiologists
norm: consulting radiologists
Domain: consultingradiologists.com
Industry: Healthcarellm

Discovered: Feb 12, 2024
Materiality determined: —
Notification sent: Jul 16, 2024
Affected individuals: 29state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Engaged a specialized cybersecurity firm to conduct a forensic investigation
Notified law firm
Identified potentially affected individuals
Offered complimentary credit monitoring and identity theft restoration services
Notified impacted individuals via U.S. mail
Notified applicable regulators
Changes made: Reviewing and enhancing existing policies and procedures related to data privacy
Deployed additional monitoring tools
Enhanced the security of its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(161 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 8 states

View merged incident ↗

Montana State AGJun 14 · first

California State AGJun 14 · first

Massachusetts State AGJun 14 · first

HHS OCRJun 14 · first

Maine State AGJun 14 · first

Indiana State AGJun 14 · first

New Hampshire State AG+4d

Vermont State AG+32d

New Hampshire State AG+38d · this page

California State AG+74d

Maine State AG+74d

Pattern: first filing Jun 14 (MT), last Aug 27 (ME) — a 74-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 14 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/consulting-radiologists-20240722.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2024
Raw hash: a81fb2d49001b9dcdf4bebd8489864ded838ea6ea6b00c3e8c9a67043a06463a

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityConsulting Radiologists

Victim entityConsulting Radiologists

Incidentdiscovered Feb 12, 2024

Stated responseEngaged a specialized cybersecurity firm to conduct a forensic investigation

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov