HackingHealthcareHealthcareCustomer Data InvolvedPIIIdentity (basic)MediumContained

Next Step Healthcare

bd_0cec3665847bf3a6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 5, 2024

Filed

May 30, 2025

To disclose

51 weeks

Affected

1,697state residents only

Linked

8 filings

Confidence

66%

Full breach record for Next Step Healthcare →

Next Step Healthcare, LLC reported a data security incident discovered on June 5, 2024, involving unauthorized access to network data. Approximately 1,697 New Hampshire residents were affected. The company engaged forensic experts, secured its environment, and offered identity theft protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d51 weeks discovery → filing

Incident timeline

discovery → filing · 51 weeks / 359 days

Jun 5, 2024

Discovered

May 22, 2025

Scope determined

May 30, 2025

Filed

vs. sector median

+39 wks slower

This filing is one of 8 about the same incident.View merged incident

A leak claim by qilin about this victim predates this filing by 359 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (3)

Leak Siteqilinbd_7dac25fd5bde3f8c2024-07-17 · +317dVerified by operator
Leak Siteqilinbd_f4e4886a92c3e6ad2024-06-17 · +347dVerified by operator
Leak Siteqilinbd_58ee69bf27d122832024-06-05 · +359dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_5c2bfa33adf0bf112025-05-30Verified by operator
HHS OCRbd_92d553698d40bfd92025-05-30Candidate
Massachusetts State AGbd_a54984fff53d02c12025-05-30Verified by operator
Vermont State AGbd_dcada36069dde6442025-05-29 · +1dVerified by operator

Name: Next Step Healthcare
norm: next step healthcare
Domain: nextstephc.com

Name: Next Step Healthcare
norm: next step healthcare
Domain: nextstephc.com
Industry: Healthcarellm

Discovered: Jun 5, 2024
Materiality determined: May 22, 2025
Notification sent: May 29, 2025
Affected individuals: 1,697state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Took steps to secure its environment
Enlisted the assistance of outside experts to conduct an investigation
Launched a comprehensive review of the potentially affected data
Retained independent cybersecurity experts to conduct a forensic investigation
Performed a thorough review of our email environment to investigate the incident
Changes made: Implemented additional security measures to protect our digital environment and minimize the likelihood of future incidents
Offering identity theft protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 51 weeks(359 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Vermont State AGMay 29 · first

Maine State AG+1d

HHS OCR+1d

Massachusetts State AG+1d

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/next-step-healthcare-20250530.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 30, 2025
Raw hash: d59173bde4e4d31e879ab5d93e8746f73804cab5be03cc05b9d1decd89fada65

Linked disclosures

Ransomware claims (3)

Regulatory filings (4) · sorted by filing gap

Reporting entityNext Step Healthcare

Victim entityNext Step Healthcare

Incidentdiscovered Jun 5, 2024

Stated responseTook steps to secure its environment

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov