HackingData ExfiltratedIDENTITY_BASICLowContained
FuturHealth
bd_04658e7033cb6bb5 · schema v1 · pii pii-v1
Full breach record for FuturHealth →FuturHealth, Inc. notified consumers of a data breach where unauthorized actors viewed and copied files containing personal information between August 8 and August 14, 2025. The breach impacted individuals in multiple states including Vermont, New York, and Maryland. FuturHealth offered 12 months of credit monitoring and identity restoration services through Epiq.
Vermont clock✗ VT AG >45 bday29 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-02-25-futurhealth-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 25, 2026
- Raw hash
- 30942400d6fab2dff62f477ed78857bee654438c2d644e999cc8f5378145deb1
Reporting entity
- Name
- FuturHealthnorm: futurhealth
- Domain
- futurhealth.org
Victim entity
- Name
- FuturHealthnorm: futurhealth
- Domain
- futurhealth.org
Incident
- Discovered
- Aug 8, 2025
- Materiality determined
- —
- Notification sent
- Feb 25, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- report this event to the appropriate regulators
Compliance
- Time to disclose
- 29 weeks(201 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.