Social EngineeringPhishingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Averhealth Holdings
bd_17f50c1a37bd6a4c · schema v1 · pii pii-v1
Full breach record for Averhealth Holdings →Averhealth Holdings notified Massachusetts and New York residents of a security incident detected on January 20, 2026, involving unauthorized access to email environments. The breach exposed personal information, including names and government identifiers (Social Security numbers). The company engaged Kroll for 12 months of credit monitoring and fraud consultation services for affected individuals.
Massachusetts clock✗ MA AG >90d23 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_f6ed28c3b18e73b4HHS OCRfiled 2026-07-02(1d gap)Verified
- bd_61124ed0d7b945afVermont State AGfiled 2026-07-15(14d gap)Verified
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-1093-averhealth-holdings/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2026
- Raw hash
- d9a04d2b3ab033e3c043125efbd8257169fbdf9ce722082dbb23bec07ea86bb8
Reporting entity
- Name
- Averhealth Holdingsnorm: averhealth holdings
Victim entity
- Name
- Averhealth Holdingsnorm: averhealth holdings
Incident
- Discovered
- Jan 20, 2026
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 23 weeks(162 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.