Wright & Filippis
ent_f31db9f43c2c33afd5cc181a
Disclosures
6
State AG · HHS OCR · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
907,642
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Wright & Filippis
- Normalized
- wright filippis— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- firsttoserve.com
Disclosure history (6)newest first
- New Hampshire State AGas victim2022-11-28
Wright & Filippis notified the New Hampshire Attorney General of a ransomware incident occurring January 26-28, 2022. The firm discovered potential impact to PHI and PII (including SSN, DOB, financial accounts) on May 2, 2022. Approximately 45 NH residents were affected. Remediation included EDR installation, password resets, and server rebuilds. Affected individuals received credit monitoring and identity theft protection services.
- Montana State AGas victim2022-11-21
Wright & Filippis, a healthcare provider, disclosed a ransomware incident occurring Jan 26-28, 2022. The attack impacted files containing PHI and PII (SSN, DOB, financial accounts). Discovered May 2, 2022. Notices sent Nov 18, 2022. Remediation included EDR deployment and password resets. No evidence of misuse found.
- Massachusetts State AGas victim2022-11-21
Wright & Filippis reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-11-21. 185 Massachusetts residents were affected. The report records the breach type as electronic.
- Indiana State AGas victim2022-11-18
Wright & Filippis reported a data breach to the Indiana Attorney General. The breach occurred on 2022-01-26 and was reported on 2022-11-18. 4,050 Indiana residents were affected. 907,642 individuals affected in total.
- California State AGas victim2022-11-18
Wright & Filippis experienced a ransomware attack from January 26-28, 2022. The organization discovered the incident on May 2, 2022. The attack may have exposed PHI and PII, including names, dates of birth, SSNs, financial account numbers, and health insurance information for patients and employees. Electronic medical records were not impacted. The company implemented EDR, reset passwords, and rebuilt servers. Identity protection services were offered.
- MICHIGANHHS OCRas victim2022-11-18
Wright & Filippis LLC reported to HHS on 2022-11-18 a Hacking/IT Incident affecting 877,584 individuals. Breached information located on Network Server. The PHI involved included names, addresses, dates of birth, Social Security numbers, and claims and financial information.