HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
New Horizons Medical
bd_fec539caa70161d5 · schema v1 · pii pii-v1
Full breach record for New Horizons Medical →New Horizons Medical, Inc. notified the NH Attorney General of unauthorized access to its IT network between Feb 12 and Apr 23, 2023. Detected on Apr 19, 2023, the incident involved PII of patients and employees. 60 NH residents were notified on Jun 16, 2023. The company engaged a cybersecurity firm and offered credit monitoring.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (3)
- bd_c4d7bd95b435f5f4Leak Sitealphvfiled 2023-06-14(2d gap)Verified by operator
- bd_d939fd288e09f9b1Leak Sitelockbit_3filed 2023-06-07(9d gap)Verified
- bd_ee19ff23a51a6b66Leak Sitedispossessorfiled 2023-06-07(9d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_21b6640148a7de43Maine State AGfiled 2023-06-16Verified
- bd_85e540f0e1a7170bVermont State AGfiled 2023-06-16Verified by operator
- bd_dafbd369b767e2b2HHS OCRfiled 2023-06-16Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/new-horizons-medical-20230616.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 16, 2023
- Raw hash
- 474f8801a67965ec0fd1bd226d5e0e36a62a31a8be265941921c63624ff070d1
Reporting entity
- Name
- New Horizons Medicalnorm: new horizons medical
- Domain
- newhorizonsmedical.org
Victim entity
- Name
- New Horizons Medicalnorm: new horizons medical
- Domain
- newhorizonsmedical.org
Incident
- Discovered
- Apr 19, 2023
- Materiality determined
- May 19, 2023
- Notification sent
- Jun 16, 2023
- Affected individuals
- 60
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.