Whiteford, Taylor & Preston LLP

Kanuga Conference Center notified the NH Attorney General of a ransomware attack discovered on Jan 20, 2022. Unauthorized access began around Jan 19, 2022, via an exchange server vulnerability. 4 NH residents affected; data included names, SSNs, and PHI. Kanuga engaged forensic experts, contacted the FBI, and provided 1 year of credit monitoring.

Whiteford Taylor & Preston LLP reported a phishing incident on 04/11/2022, discovered 05/11/2022, affecting 1,210 individuals. Driver's license numbers and names were compromised. Notification was sent 01/20/2023, offering 24 months of identity protection services. One Maine resident was affected.

Medical Review Institute of America (MRIoA) filed a supplemental breach notification with the New Hampshire Attorney General on February 3, 2022, identifying 437 affected NH residents. The incident, a sophisticated cyber-attack discovered on November 9, 2021, involved unauthorized access and acquisition of PHI, including SSNs and medical records. MRIoA engaged forensic experts, notified the FBI, and offered one year of Kroll identity monitoring.

Kanuga Conference Center, a non-profit located in Hendersonville, NC, experienced an external system breach (hacking) on January 19, 2022. The incident compromised the names and Social Security Numbers of 1,971 individuals, including one Maine resident. Kanuga notified affected individuals in writing on March 4, 2022, and provided credit monitoring and identity theft protection services through Kroll.

JMA Energy notified the New Hampshire Attorney General of a ransomware attack discovered on December 6, 2021. The incident affected 5 New Hampshire residents, exposing names, addresses, SSNs, tax IDs, and banking information. JMA engaged forensic experts, contained the breach, and mailed notifications on February 23, 2022.

Extend Fertility, a medical organization, notified the New Hampshire Attorney General of a ransomware incident discovered on December 20, 2021. Unauthorized access occurred on or about December 15, 2021. The breach affected 4 New Hampshire residents, exposing demographic, clinical, and financial information. Extend Fertility engaged forensic experts, notified the FBI, and provided credit monitoring to affected individuals.

TriValley Primary Care filed a supplemental notice with the New Hampshire Attorney General regarding a ransomware incident discovered on October 11, 2021. The filing adds 18 New Hampshire residents to the count, bringing the total state-affected individuals to 29. The breach exposed PHI, SSNs, and financial data. The organization engaged forensic experts and the FBI, and is providing credit monitoring.

TriValley Primary Care notified the New Hampshire Attorney General of a ransomware incident discovered on October 11, 2021, affecting 11 NH residents. The breach exposed demographic, government ID (SSN), clinical, and financial data. The organization engaged forensic experts and the FBI, contained the threat, and provided credit monitoring to affected individuals. Notification was sent on November 24, 2021.

City College, an educational network in Florida, notified the New Hampshire Attorney General of a ransomware incident discovered on August 16, 2021. The breach potentially exposed the personal information (names, SSNs, DOBs, addresses) of six New Hampshire residents. City College engaged forensic experts, restored systems, and confirmed deletion of exfiltrated data. Notifications were mailed to affected individuals on November 11, 2021, offering one year of credit monitoring. Remediation included implementing MFA and enhancing security policies.

AGI Publishing, Inc. (d/b/a Valley Yellow Pages) notified Montana AG of a ransomware attack discovered on Sept 11, 2021. The incident impacted 9 Montana residents, exposing SSNs and PHI (names, addresses, health plan numbers). Access was gained via VPN. AGI engaged forensic experts, notified the FBI, and provided 1 year of credit monitoring to affected individuals.

Professional Healthcare Management, Inc. (PHM) notified the New Hampshire Attorney General of a ransomware attack discovered on September 14, 2021. The incident affected 3 New Hampshire residents. PHM engaged forensic experts, secured systems, and provided credit monitoring. Potentially impacted data included names, SSNs, health insurance info, and financial account numbers. No evidence of misuse was found.

Family of Woodstock, Inc. notified the NH Attorney General of a cyber incident discovered on August 3, 2021. An unauthorized individual gained access via a brute force attack. The incident potentially impacted 8 New Hampshire residents. Affected data included PHI, SSNs, driver's license numbers, and medical history. The organization engaged forensic experts, notified law enforcement, and is providing credit monitoring.

Directions for Living (DFL) filed a supplemental security breach notification with the New Hampshire Attorney General on September 17, 2021. DFL confirmed one additional impacted NH resident, bringing the total to 2. The incident involved ransomware discovered on July 17, 2021, exposing employee SSNs. DFL engaged forensic experts and law enforcement, and is providing credit monitoring.

San Andreas Regional Center notified NH AG of a ransomware incident discovered July 5, 2021. Unauthorized access via open RDP on July 3 encrypted systems and potentially exfiltrated PHI and PII of 3 NH residents. SARC engaged forensic experts, notified FBI, and offered 1 year of credit monitoring.