HackingHealthcareHealthcareData ExfiltratedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Ever Care Corporation

bd_1021d86a68d8caf2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 3, 2025

Filed

Oct 24, 2025

To disclose

7 weeks

Affected · nationwide

88219 in this filing

Linked

3 filings

Confidence

66%

Full breach record for Ever Care Corporation →

Ever Care Corporation d/b/a Right at Home experienced a cybersecurity event on September 3, 2025, where certain files were likely acquired without authorization. The incident affected 882 individuals nationwide, including 19 New Hampshire residents. Affected data included names and Social Security numbers. The company notified affected individuals on October 23, 2025, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 51 days

Sep 3, 2025

Begins

Sep 3, 2025

Discovered

Oct 24, 2025

Filed

vs. sector median

5 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_4e3a6544282289e12025-10-24Candidate
Massachusetts State AGbd_4e96189b32189f562025-10-24Verified

Name: Ever Care Corporation d/b/a Right at Home
norm: ever care corporation
Domain: wilsonelser.com

Name: Ever Care Corporation
norm: ever care
Also named: Ever Care Corporationdba oflegal entity
Right at Homedba oftrade name
Industry: Healthcarellm

Discovered: Sep 3, 2025
Breach occurred: Sep 3, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 23, 2025
Affected individuals: 882state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General pursuant to N.H. Rev. Stat. §§ 359-C:20

During the incident: Began an investigation to secure the environment and determine what happened
Began a comprehensive review of the data within those files to learn if any contained personal information
Worked expeditiously to notify individuals whose information was found in the files
Offered 12 months of complimentary credit monitoring and identity theft restoration services
Changes made: Taking steps to prevent a similar event from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(51 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGOct 24 · first

Massachusetts State AGOct 24 · first

New Hampshire State AGOct 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ever-care-right-home-20251024.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 24, 2025
Raw hash: 1faaae982745e851d17a59ba9571dd2e8330e504481ee3fd1897abf06c42d1e3

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityEver Care Corporation d/b/a Right at Home

Victim entityEver Care Corporation

Incidentdiscovered Sep 3, 2025

Stated responseBegan an investigation to secure the environment and determine what happened

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov