Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumContained
AllCare Plus Pharmacy, Inc.
bd_ed00763a16da7aa2 · schema v1 · pii pii-v1
Full breach record for AllCare Plus Pharmacy, Inc. →AllCare Plus Pharmacy, Inc. notified the New Hampshire Attorney General of a data breach affecting 25 state residents. The incident involved phishing emails sent to employees, leading to unauthorized access to email inboxes containing PHI, SSNs, and financial data. AllCare reset credentials, engaged forensic investigators, and offered 24 months of credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_016eb0e9eb948a4eCalifornia State AGfiled 2023-03-14(1d gap)Candidate
- bd_68b88f2af1a2f6e1Maine State AGfiled 2023-03-14(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/allcare-plus-pharmacy-20230315.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 15, 2023
- Raw hash
- b2de1017f6d84061ae97612691006e188ed752071a76efa025c5bdce01ea1a4e
Reporting entity
- Name
- AllCare Plus Pharmacy, Inc.norm: allcare plus pharmacy
Victim entity
- Name
- AllCare Plus Pharmacy, Inc.norm: allcare plus pharmacy
Incident
- Discovered
- Jun 21, 2022
- Materiality determined
- —
- Notification sent
- Mar 13, 2023
- Affected individuals
- 25
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- phishing_link
Compliance
- Time to disclose
- 38 weeks(267 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.