A New Leaf, Inc.

A New Leaf, Inc. notified the New Hampshire Attorney General of a ransomware incident discovered on March 30, 2021. The attack encrypted files and resulted in the exfiltration of personal information, including names, Social Security numbers, and potentially PHI, affecting 2 New Hampshire residents. The organization engaged forensic investigators, implemented endpoint monitoring, and provided 12 months of credit monitoring to affected individuals. Notifications were mailed on December 30, 2021.

A New Leaf, Inc. reported to HHS on 2021-12-30 a Hacking/IT Incident affecting 10,438 individuals. Breached information located on Network Server. The incident involved a ransomware attack compromising PHI including names, addresses, SSNs, diagnoses, and medications.

A New Leaf, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-12-30. 6 Massachusetts residents were affected. The report records the breach type as electronic.

A New Leaf, Inc. reported an external system breach (hacking) occurring on March 30, 2021. The incident compromised names and Social Security Numbers of approximately 17,150 individuals, including one Maine resident. The organization notified affected individuals in writing on December 30, 2021, and provided 12 months of credit monitoring through Experian.

A New Leaf, Inc. notified affected individuals of a March 30, 2021 ransomware incident that encrypted files and resulted in the exfiltration of PHI and PII. The company engaged a cybersecurity firm for investigation and offered one year of Experian IdentityWorks credit monitoring to impacted individuals.

A New Leaf, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-03-30 and was reported on 2021-12-30. 10 Indiana residents were affected. 17,150 individuals affected in total.