HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumActive
Beverly Hills Oncology Medical Group
bd_28ed7ba59e9d002e · schema v1 · pii pii-v1
Full breach record for Beverly Hills Oncology Medical Group →Beverly Hills Oncology Medical Group notified the New Hampshire Attorney General's Office on November 6, 2025, regarding unauthorized network access occurring between February 7 and 11, 2025. The incident potentially affected 5 New Hampshire residents, exposing personal information including SSNs, driver's licenses, financial account data, and protected health information (PHI). The organization engaged outside cybersecurity professionals for investigation and is offering credit monitoring services to affected individuals. The investigation concluded on October 13, 2025.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_07c86b24e4685d33California State AGfiled 2025-10-31(6d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/beverly-hills-oncology-medical-group-20251106.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 6, 2025
- Raw hash
- 507e853b2b7e6a83dcf37799db987bcabdb190b02df94821cf785e9756763f9e
Reporting entity
- Name
- McDonaldnorm: mcdonald
- Domain
- mcdonalds-menus.us
Victim entity
- Name
- Beverly Hills Oncology Medical Groupnorm: beverly hills oncology medical
Incident
- Discovered
- Feb 11, 2025
- Materiality determined
- —
- Notification sent
- Oct 31, 2025
- Affected individuals
- 5
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated CollectionT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 38 weeks(268 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.