HackingHealthcareHealthcareCustomer Data InvolvedPIIPHILowContained

Northwest Medical Homes, LLC

bd_204504bd7745b258 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 5, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

76%

Full breach record for Northwest Medical Homes, LLC →2 incidents on file

Northwest Medical Homes, LLC (NMH), a medical home services provider based in Springfield, OR, detected unauthorized access to its computer network on May 13, 2025. The breach date is listed as March 19, 2025. Personal and health information of affected individuals may have been compromised, including names, mailing addresses, and other data elements. NMH engaged third-party forensic experts, notified law enforcement, and is offering complimentary credit monitoring and identity restoration services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 19, 2025

Begins

Mar 5, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_1301f98be6b637932026-03-05Verified
Washington State AGbd_253dc7abb1cfa2b32026-03-05Verified
Oregon State AGbd_df26b3d2bd7a4eaa2026-03-05Candidate
Vermont State AGbd_bf69e32ae683423c2026-02-26 · +7dVerified

Name: Northwest Medical Homes, LLC
norm: northwest medical homes

Name: Northwest Medical Homes, LLC
norm: northwest medical homes
Industry: Healthcarellm

Discovered: —
Breach occurred: Mar 19, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Detected the incident on May 13, 2025, involving unauthorized access to NMH's computer network
Immediately initiated incident response
Engaged additional third-party experts
Third parties took steps to secure our environment
Hardened and enhanced our network security
Completed a digital forensic investigation to determine the extent of unauthorized activity within NMH's network
Notified law enforcement regarding this incident
Arranged for complimentary credit monitoring and identity restoration services for affected individuals
Changes made: Committed to the strength of our systems' security to prevent a similar event from occurring in the future
Focused on continuous awareness training and assessment of our data security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Vermont State AGFeb 26 · first

Massachusetts State AG+7d

Washington State AG+7d

Oregon State AG+7d

California State AG+7d · this page

Pattern: first filing Feb 26 (VT), last Mar 5 (CA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-619695
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 5, 2026
Raw hash: 8c9c5e13e68df74e57ca6cda907eaa9b3e57e26379d89b8e2d3f36c7652a79fe

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityNorthwest Medical Homes, LLC

Victim entityNorthwest Medical Homes, LLC

IncidentUnauthorized Access

Stated responseDetected the incident on May 13, 2025, involving unauthorized access to NMH's computer network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov