MalwareHealthcareHealthcareRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Any-Time Home Care, Inc.

bd_0860603dc5c28145 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 13, 2026

Filed

Jul 21, 2026

To disclose

14 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for Any-Time Home Care, Inc. →

Any-Time Home Care, Inc. experienced a ransomware attack on March 17, 2026, resulting in file encryption. On April 13, 2026, the company determined that PII, including names, addresses, social security numbers, and dates of birth, may have been accessed. Two New Hampshire residents were affected. The company implemented security enhancements including MFA upgrades, EDR deployment, and offered identity theft protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 27 days

discovery → filing · 14 weeks / 99 days

Mar 17, 2026

Begins

Apr 13, 2026

Discovered

Jul 21, 2026

Filed

vs. sector median

+2 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_2a1a4fde5bd1576f2026-07-21Verified
Vermont State AGbd_55a4745a1dcda3542026-07-21Verified
Illinois State AGbd_06d67337a0f813aa2026-07-01 · +20dCandidate

Name: Any-Time Home Care, Inc.
norm: any-time home care
Domain: jacksonlewis.com

Name: Any-Time Home Care, Inc.
norm: any time home care
Industry: Healthcarellm

Discovered: Apr 13, 2026
Breach occurred: Mar 17, 2026
Undetected for: 27 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 24, 2026
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Notified Office of the Attorney General, Consumer Protection & Antitrust Bureau

During the incident: Commenced an investigation of the Incident, with assistance from third party experts
Manually reviewing the contents of those files to determine whether they contained personally identifiable information
Implemented a forced reset of all passwords and authenticator tokens for email and local domain accounts
Deployed new security services on its desktops
Upgraded its multi-factor authentication and firewall software capabilities
Installed endpoint detection and response software on its systems
Deployed identity threat detection and response software to its O365 cloud environment
Retired and replaced the impacted server cluster equipment and affected domains
Tightened password complexity requirements
Updated its data security policies
Changes made: Offering identity theft protection services through IDX
IDX identity protection services include credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed ID theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(99 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Illinois State AGJul 1 · first

Massachusetts State AG+20d

Vermont State AG+20d

New Hampshire State AG+20d · this page

Pattern: first filing Jul 1 (IL), last Jul 21 (NH) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/any-time-home-care-20260721.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2026
Raw hash: 7ad713fe1ac88202a1cfb3c289497e7d43af2ed4e85a88ed61ea45fdc29b1c60

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAny-Time Home Care, Inc.

Victim entityAny-Time Home Care, Inc.

Incidentdiscovered Apr 13, 2026

Stated responseCommenced an investigation of the Incident, with assistance from third party experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov