HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

Innovative Scientific Solutions, LLC

bd_038eaa7a73e9e50c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 31, 2026

Filed

Apr 20, 2026

To disclose

20 days

Affected

3state residents only

Linked

6 filings

Confidence

66%

Full breach record for Innovative Scientific Solutions, LLC →

Innovative Scientific Solutions, LLC notified the New Hampshire Attorney General of unauthorized network access occurring on or around September 6, 2025. The breach potentially exposed personal information, including names, DOBs, SSNs, and PHI, for 3 NH residents. Discovery occurred on March 31, 2026, following forensic review. Residents were notified on April 7, 2026, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 206 days

discovery → filing · 20 days

Sep 6, 2025

Begins

Mar 31, 2026

Discovered

Apr 20, 2026

Filed

vs. sector median

9 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Texas State AGbd_f53b94c5bfd3bf8b2026-04-22 · +2dVerified
South Carolina State AGbd_ff7a0a231566f3012026-04-23 · +3dVerified
HHS OCRbd_bd246758b1c271e82026-04-17 · +3dVerified
Massachusetts State AGbd_d40a87f33fda4a552026-04-17 · +3dVerified

Show 1 more filing ↓up to 13d gap

Nebraska State AGbd_0cb4abc503dc03ec2026-04-07 · +13dVerified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: Innovative Scientific Solutions, LLC
norm: innovative scientific solutions
Industry: Healthcarellm

Discovered: Mar 31, 2026
Breach occurred: Sep 6, 2025
Undetected for: 206 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 7, 2026
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the New Hampshire Office of the Attorney General
Initial access: valid_credentials

During the incident: Contained the threat
Commenced a prompt and thorough investigation
Worked very closely with external cybersecurity professionals
Conducted a thorough forensic investigation
Conducted extensive manual document review
Notified the affected residents
Offered complimentary memberships with a credit monitoring service
Changes made: Continually evaluates and modifies its practices to enhance the security and privacy of the personal information it maintains
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Nebraska State AGApr 7 · first

HHS OCR+10d

Massachusetts State AG+10d

New Hampshire State AG+13d · this page

Texas State AG+15d

South Carolina State AG+16d

Pattern: first filing Apr 7 (NE), last Apr 23 (SC) — a 16-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/innovative-scientific-solutions-20260420.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 20, 2026
Raw hash: 0b046e245bba0b47aa57277b110171f302d2f0c2315d04e94a4fe71482ad0a5c

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityInnovative Scientific Solutions, LLC

Incidentdiscovered Mar 31, 2026

Stated responseContained the threat

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov