HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Medical Associates of Brevard, LLC
bd_1a02292581ce4e21 · schema v1 · pii pii-v1
Full breach record for Medical Associates of Brevard, LLC →Medical Associates of Brevard, LLC notified the New Hampshire Attorney General of a criminal cyberattack affecting 100 NH residents. Discovered July 7, 2025, the incident exposed PII including names, SSNs, driver's licenses, and PHI. MAB secured systems, replaced firewalls, and provided 12 months of credit monitoring.
Leak gap clock✗ Leak >180d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 235 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_e893a194966d9bcdHHS OCRfiled 2025-09-05(4d gap)Verified
- bd_edb62dd27b0c7f3fIndiana State AGfiled 2025-09-05(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/medical-associates-brevard-20250909.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 9, 2025
- Raw hash
- 2d96e8adbf6644cf801e2bc7df579aaab7b84feaed150db4e56a6238a5b7b75f
Reporting entity
- Name
- Jackson Lewisnorm: jackson lewis
- Domain
- jacksonlewis.com
Victim entity
- Name
- Medical Associates of Brevard, LLCnorm: medical of brevard
- Domain
- mabmd.com
Incident
- Discovered
- Jul 7, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 100
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.