Social EngineeringPhishingCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
National University of Natural Medicine
bd_1bd53a3a48ee1fcf · schema v1 · pii pii-v1
Full breach record for National University of Natural Medicine →National University of Natural Medicine (NUNM) notified the New Hampshire Attorney General of a security incident affecting approximately 3 NH residents. Unauthorized access to an employee email account occurred between July 22 and July 29, 2025, likely via phishing. The review confirmed names and Social Security numbers were potentially accessed. NUNM notified individuals on November 26, 2025, and offered credit monitoring via Kroll.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_0d18555132480751Indiana State AGfiled 2025-11-26(5d gap)Verified
- bd_1b06caf98ea5bd8fMaine State AGfiled 2025-11-26(5d gap)Candidate
- bd_99008cb8d07aec6bVermont State AGfiled 2025-11-26(5d gap)Verified
- bd_b2a8e852202dea7dOregon State AGfiled 2025-11-26(5d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 5d gap
- bd_bb50dd7193281f83Montana State AGfiled 2025-11-26(5d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/national-university-natural-medicine-20251201.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 1, 2025
- Raw hash
- 34869a3bf858bc4308b7fb9939453f3b7d11e59b98d4e9c2e1b2a11dcd629340
Reporting entity
- Name
- McDonaldnorm: mcdonald
- Domain
- mcdonalds-menus.us
Victim entity
- Name
- National University of Natural Medicinenorm: national university of natural medicine
Incident
- Discovered
- Jul 29, 2025
- Materiality determined
- —
- Notification sent
- Nov 26, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- phishing_link
Compliance
- Time to disclose
- 18 weeks(125 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.