HackingHealthcareHealthcareStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Central Texas MHMR Center

bd_169e0607bd9dd9bc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 17, 2025

Filed

Jul 22, 2026

To disclose

35 weeks

Affected

3state residents only

Linked

5 filings

Confidence

65%

Full breach record for Central Texas MHMR Center →2 incidents on file

Central Texas MHMR dba Center for Life Resources (CFLR) notified Massachusetts residents of a cybersecurity incident where an unknown actor accessed the internal network between November 14-15, 2025. CFLR discovered the activity on November 17, 2025. Files were copied and potentially viewed, involving client identity information (SSNs, DOBs, etc.). CFLR secured the network, engaged cybersecurity specialists, reported to federal law enforcement and HHS, and offered 24 months of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d35 weeks discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 35 weeks / 247 days

Nov 14, 2025

Begins

Nov 17, 2025

Discovered

Jul 22, 2026

Filed

vs. sector median

+23 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Vermont State AGbd_4c7ceaa1fb482f292026-07-22Verified
New Hampshire State AGbd_829891e97ffbf36a2026-07-22Verified
Nebraska State AGbd_e51e7467e843458c2026-07-22Verified
Texas State AGbd_4b94a33a642beb292026-07-23 · +1dVerified

Name: Central Texas MHMR Center
norm: central texas mhmr center

Name: Central Texas MHMR Center
norm: central texas mhmr center
Also named: Central Texas MHMRdba oflegal entity
Center for Life Resourcesdba oftrade name
Industry: Healthcarellm

Discovered: Nov 17, 2025
Breach occurred: Nov 14, 2025 – Nov 15, 2025
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 22, 2026
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Reported to federal law enforcementReporting this incident to appropriate regulators, including the U.S. Department of Health and Human Services
Initial access: valid_credentials

During the incident: Secured our network
Launched an investigation with assistance from cybersecurity specialists
Reported this to federal law enforcement
Reporting this incident to appropriate regulators, including the U.S. Department of Health and Human Services
Offering you access to 24 months of credit monitoring and identity protection services through TransUnion
Changes made: Reviewing existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(247 days from discovery to filing)
Compliance flags: MA AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Vermont State AGJul 22 · first

New Hampshire State AGJul 22 · first

Nebraska State AGJul 22 · first

Massachusetts State AGJul 22 · first · this page

Texas State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1201-central-texas-mhmr-dba-center-for-life-resources/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2026
Raw hash: 8b9fa73ebf676d5c90a3fbb1debc3ac03247dd849e2e13d7d32c70c451e2ab2b

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCentral Texas MHMR Center

Victim entityCentral Texas MHMR Center

Incidentdiscovered Nov 17, 2025

Stated responseSecured our network

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov