HackingHealthcareHealthcareStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighActive

Avia Dental Plan

bd_e415639605499005 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 6, 2011

Filed

Oct 14, 2011

To disclose

8 days

Affected · nationwide

2,5001 in this filing

Linked

2 filings

Confidence

67%

Full breach record for Avia Dental Plan →

Avia Dental Plan notified the NH AG that the US Secret Service investigated criminal theft of password information to its administrative software. Unauthorized access may have exposed member PII (names, SSNs, DOB, addresses, credit card info) and dependent data. ~2,500 customers nationwide affected (1 NH resident). Notification sent Oct 6, 2011. Investigation ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 days

Oct 6, 2011

Discovered

Oct 14, 2011

Filed

vs. sector median

11 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_89632ef489e4667d2011-10-17 · +3dVerified

Name: Thorp Reed & Armstrong
norm: thorp reed armstrong

Name: Avia Dental Plan
norm: avia dental plan
Industry: Healthcarellm

Discovered: Oct 6, 2011
Materiality determined: —
Notification sent: Oct 6, 2011
Affected individuals: 2,500state + nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified United States Secret ServiceNotified New Hampshire Office of the Attorney General
Initial access: valid_credentials

During the incident: Launched an internal investigation
Working with information technology professionals
Cooperating with the United States Secret Service’s investigation
Changes made: Conducting a comprehensive internal review of its systems and procedures to further secure its customer information against unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 days(8 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGOct 14 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/avia-20111014.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 14, 2011
Raw hash: 35618f9233c6e09d53526a2d8d3eab891fc98f1b5a37797d05324617ce44a203

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThorp Reed & Armstrong

Victim entityAvia Dental Plan

Incidentdiscovered Oct 6, 2011

Stated responseLaunched an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov