HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedPIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICMediumActive
Mainline Health Systems Inc
bd_261065496c6ad4cb · schema v1 · pii pii-v1
Full breach record for Mainline Health Systems Inc →Mainline Health Systems Inc reported an unauthorized access incident occurring on or about April 10, 2024, discovered on May 21, 2025. The breach impacted approximately one New Hampshire resident, exposing PII, PHI, SSNs, financial account data, and medical records. Mainline notified law enforcement, engaged cybersecurity experts, and is offering credit monitoring services. The investigation is ongoing.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2f3a0de1cd17c274HHS OCRfiled 2025-06-23(1d gap)Verified
- bd_f84aac6a930bd29bMaine State AGfiled 2025-06-23(1d gap)Verified
- bd_4b8f3ae79ac45cb0Texas State AGfiled 2025-06-30(6d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mainline-health-systems-20250624.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 24, 2025
- Raw hash
- e6819eaecc5a46e0080ad195905ecd8046f6c6a7e6c8c9f048c1692412ef80c4
Reporting entity
- Name
- Mainline Health Systems Incnorm: mainline health
Victim entity
- Name
- Mainline Health Systems Incnorm: mainline health
Incident
- Discovered
- May 21, 2025
- Materiality determined
- —
- Notification sent
- Jun 20, 2025
- Affected individuals
- 1
- Data types
- PIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.