MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Grandison Management, Inc.; Towne Home Care, LLC
bd_f566da6af19971f7 · schema v1 · pii pii-v1
Full breach record for Grandison Management, Inc.; Towne Home Care, LLC →On May 15, 2021, Grandison Management, Inc. and Towne Home Care, LLC suffered a ransomware attack. The incident exposed personal information of 16 New Hampshire residents, including names, SSNs, financial account numbers, and medical information. Notifications were mailed in early 2022, offering one year of credit monitoring. The FBI was notified, and the network was secured.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_f6171248af8148a9Maine State AGfiled 2022-03-22(1d gap)Verified by operator
- bd_819ea73189faf00dMontana State AGfiled 2022-02-08(43d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/grandison-management-towne-home-care-20220323.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 23, 2022
- Raw hash
- 6d1d6cd9410d979bda6db31858418c92e2f626a85452d1485e5a402e3c4068ff
Reporting entity
- Name
- Grandison Management, Inc.norm: grandison management
Victim entity
- Name
- Grandison Management, Inc.; Towne Home Care, LLCnorm: grandison management inc towne home care
Incident
- Discovered
- May 15, 2021
- Materiality determined
- —
- Notification sent
- Feb 8, 2022
- Affected individuals
- 16
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 45 weeks(312 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.