MalwareRansomwareData ExfiltratedData EncryptedRansom DemandedPIIIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Harvard Pilgrim Health Care
bd_e3cbbfda0c66639b · schema v1 · pii pii-v1
Full breach record for Harvard Pilgrim Health Care →Harvard Pilgrim Health Care disclosed a ransomware incident discovered on April 17, 2023, affecting systems servicing members and providers. Data was copied between March 28 and April 17, 2023. The notice, filed in Vermont on March 27, 2024, specifically identifies approximately 9,766 Rhode Island residents as potentially impacted. Affected data includes personal information such as names and government IDs. The company engaged forensic experts, took systems offline, and offered two years of credit monitoring.
Vermont clock✗ VT AG >45 bday49 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_6228e5282fce1211Maine State AGfiled 2024-03-27Verified
- bd_653dd03a96a63057Delaware State AGfiled 2024-03-27Verified
- bd_c229892302105957New Hampshire State AGfiled 2024-03-27Verified
- bd_dbc80eaf19d4bfa1California State AGfiled 2024-03-27Verified
Show 4 more filings ↓Show fewer ↑up to 41d gap
- bd_2cfb222c1f723d12New Hampshire State AGfiled 2024-02-15(41d gap)Verified
- bd_718a015221cd2671California State AGfiled 2024-02-15(41d gap)Verified
- bd_75a606d40f78de2eDelaware State AGfiled 2024-02-15(41d gap)Candidate
- bd_9dcb7294e442d8b9Maine State AGfiled 2024-02-15(41d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-03-27-harvard-pilgrim-health-care-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 27, 2024
- Raw hash
- 48021f8950e9e12c50729db8787ec5a50a76667bebe51aa4da6c80e796113c42
Reporting entity
- Name
- Harvard Pilgrim Health Carenorm: harvard pilgrim health care
- Domain
- point32health.org
Victim entity
- Name
- Harvard Pilgrim Health Carenorm: harvard pilgrim health care
- Domain
- point32health.org
Incident
- Discovered
- Apr 17, 2023
- Materiality determined
- Mar 27, 2024
- Notification sent
- Mar 27, 2024
- Affected individuals
- 9,766
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified regulators
Compliance
- Time to disclose
- 49 weeks(345 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.