Social EngineeringHealthcareHealthcarePhishingCustomer Data InvolvedIdentity (basic)Government IDMediumContained

PREMIER HEALTH PARTNERS

bd_ec53001a021efe76 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 8, 2020

Filed

Nov 30, 2020

To disclose

25 weeks

Affected

2state residents only

Linked

5 filings

Confidence

66%

Full breach record for PREMIER HEALTH PARTNERS →7 incidents on file

Premier Health Partners notified the New Hampshire Attorney General of a data event affecting two NH residents. Unauthorized access to employee email accounts occurred between May 5 and June 16, 2020, discovered on June 8, 2020. Names and SSNs were potentially accessed. Notifications were sent starting August 7, 2020. Remediation included forensic investigation, staff retraining, and 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 34 days

discovery → filing · 25 weeks / 175 days

May 5, 2020

Begins

Jun 8, 2020

Discovered

Nov 30, 2020

Filed

vs. sector median

+13 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_f0f972ab371becd42020-11-24 · +6dVerified
Maine State AGbd_bce2bac939a373f22020-11-20 · +10dVerified by operator
Montana State AGbd_77a646a43f1c14802020-10-02 · +59dCandidate
HHS OCRbd_ec7cb1dea52a53482020-10-02 · +59dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: PREMIER HEALTH PARTNERS
norm: premier health
Industry: Healthcarellm

Discovered: Jun 8, 2020
Breach occurred: May 5, 2020 – Jun 16, 2020
Undetected for: 34 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 7, 2020
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Notified law enforcement, its relevant federal regulator, and other state regulators
Initial access: phishing_link

During the incident: Reset passwords to the accounts
Working with computer forensic specialists
Retraining staff and implementing additional safeguards
Providing access to credit monitoring services for twelve (12) months
Notified law enforcement, its relevant federal regulator, and other state regulators
Changes made: Retraining staff and implementing additional safeguards to further secure the information in its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(175 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGOct 2 · first

HHS OCROct 2 · first

Maine State AG+49d

Massachusetts State AG+53d

New Hampshire State AG+59d · this page

Pattern: first filing Oct 2 (MT), last Nov 30 (NH) — a 59-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/premier-health-partners-20201130.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2020
Raw hash: 77197b9b3bdddd2bdb361421c7beb486496a385510319a756c6171caacbecdce

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityPREMIER HEALTH PARTNERS

Incidentdiscovered Jun 8, 2020

Stated responseReset passwords to the accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov