NASCO Industries Inc
ent_019e22649929979816c30964305d2d77
Disclosures
17
Leak Site · State AG · HHS OCR · 9 jurisdictions
Incidents
4
filings grouped by incident
Max affected reported
1,744,655
as filed · HHS OCR FEDERAL
Leak-site claims
4
unverified actor claims
Identity resolution
- Canonical name
- NASCO Industries Inc
- Normalized
- nasco industries— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 25490000OV0CZYUZ7739
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- nasco.com
Disclosure history (17)newest first
- GLOBALLeak Siteas victim2026-06-29
N/A
- 🦞Maine State AGas victim2024-01-10
NASCO, a healthcare services provider, experienced an external system breach on May 30, 2023, which was discovered on August 21, 2023. The breach impacted 4,489 Maine residents, compromising their names and Social Security numbers. The company began notifying affected individuals on October 2, 2023, and offered 24 months of identity monitoring services through Experian.
- 🐻California State AGas victim2024-01-10
NASCO, a benefits administration services provider for health plans, experienced a data security incident on May 30, 2023, involving its third-party file-sharing application, MOVEit Transfer by Progress Software. A threat actor exploited a vulnerability in MOVEit to acquire data. NASCO discovered the incident on July 12, 2023. Affected data includes personal and health information of health plan members. NASCO decommissioned the affected server, discontinued MOVEit use, engaged forensic investigators, notified law enforcement, and is offering 24 months of identity monitoring via Experian.
- 🍁Vermont State AGas victim2024-01-08
NASCO, a healthcare benefits administrator, disclosed a data breach involving its MOVEit Transfer file-sharing application. The incident occurred on May 30, 2023, and was discovered on July 12, 2023. Personal information of health plan members was accessed. NASCO engaged forensic investigators, notified law enforcement, decommissioned the affected server, and offered 24 months of credit monitoring via Experian IdentityWorks.
- ⛰️New Hampshire State AGas victim2023-11-03
NASCO, a supplier of educational and agricultural products, notified the New Hampshire Department of Justice on November 3, 2023, regarding unauthorized access to its network discovered on August 21, 2023. The incident potentially compromised employees' and customers' personal information. NASCO engaged forensic investigators and law enforcement.
- 🦞Maine State AGas victim2023-10-28
NASCO, a healthcare organization, reported an external system breach (hacking) that occurred on May 30, 2023, and was discovered on August 21, 2023. The breach affected 2,840 Maine residents, compromising their names and Social Security numbers. NASCO notified the affected individuals on October 27, 2023, and offered 24 months of identity monitoring services through Experian.
- 🍁Vermont State AGas victim2023-10-27
NASCO, a healthcare benefits administrator, disclosed a cybersecurity incident involving its MOVEit Transfer file-sharing application. A threat actor exploited the application on May 30, 2023, acquiring personal information of health plan members. NASCO discovered the incident on July 12, 2023, decommissioned the affected server, engaged forensic investigators, and notified law enforcement. Affected individuals were offered 24 months of credit monitoring.
- 🦫Oregon State AGas victim2023-10-27
NASCO reported a data breach to the Oregon Attorney General. The breach was reported on 2023-10-27. 804,862 individuals were affected.
- 🐻California State AGas victim2023-10-27
NASCO, a benefits administration services provider for health plans, experienced a data security incident on May 30, 2023, involving its third-party file-sharing application, MOVEit Transfer by Progress Software. A threat actor exploited a vulnerability in MOVEit to acquire data, including personal and health information of NASCO's health plan customers. NASCO discovered the incident on July 12, 2023, and promptly secured its systems, launched a forensic investigation, and notified law enforcement. The affected MOVEit server was decommissioned. NASCO is offering 24 months of complimentary identity monitoring and credit monitoring services to affected individuals.
- 🌲Washington State AGas victim2023-10-27
NASCO, a health sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2023-07-12 and filed notice on 2023-10-27. 12,986 Washington residents were affected. 107 days elapsed between awareness and notification. 43 days to identify the breach. 0 days to contain the breach.
- 🦬Montana State AGas victim2023-10-27
NASCO reported a data breach to the Montana Attorney General. The breach was reported on 2023-10-27. The breach occurred from 5/29/2023 to 5/30/2023. 680 Montana residents were affected.
- ⛰️New Hampshire State AGas victim2023-10-25
State of New Hampshire Attorney General's office received a breach notification from NASCO on October 25, 2023. The attached PDF document is empty (6 pages of blank content). No specific details regarding the nature of the breach, affected data, or incident dates are provided in the visible text.
- 🦞Maine State AGas victim2023-10-20
Healthcare organization NASCO reported an external system breach that occurred on May 30, 2023, and was discovered on August 21, 2023. The breach affected one Maine resident, compromising their Social Security Number. NASCO provided written notification to the affected individual on October 20, 2023, and offered 24 months of identity monitoring services through Experian.
- FEDERALHHS OCRas victim2023-10-10
NASCO, a business associate, reported to HHS on October 10, 2023, a hacking incident that affected 1,744,655 individuals. The breach occurred on a network server and was caused by an exposed software application. The compromised protected health information (PHI) included names, dates of birth, addresses, Social Security numbers, diagnoses, and claims information. In response, NASCO provided complimentary credit monitoring and implemented enhanced security safeguards.
- GLOBALLeak Siteas victim2023-07-12
NASCO – NASCO is a healthcare company dedicated to co-creating digital health solutions for Blue Cross and Blue Shield companies.
- GLOBALLeak Siteas victim2022-12-20
nasco.com
- GLOBALLeak Siteas victim2021-09-22