HackingStolen CredentialsData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
SAINT MARY'S HOME OF ERIE
bd_2e43eafcee24500d · schema v1 · pii pii-v1
Full breach record for SAINT MARY'S HOME OF ERIE →Saint Mary’s Home of Erie notified the NH AG that files on its databases were accessible to unauthorized parties between Aug 26-28, 2025. SMHE discovered suspicious activity on Aug 27, 2025. Data potentially exposed included names, SSNs, driver's licenses, and financial account info. Two NH residents were notified on Feb 20, 2026. SMHE engaged forensic specialists, notified law enforcement, and offered 12 months of credit monitoring.
Leak gap clock⏱ Leak >90d25 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
A leak claim by worldleaks about this victim predates this filing by 176 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/saint-marys-home-erie-20260220.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 20, 2026
- Raw hash
- 0c62ab7b847e68ec9690c6cbdb04f884a47e5ebb706ebbd58af7f7eedc5a5030
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- SAINT MARY'S HOME OF ERIEnorm: saint mary s home of erie
- Domain
- smhe2.org
Incident
- Discovered
- Aug 27, 2025
- Materiality determined
- —
- Notification sent
- Feb 20, 2026
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotifying the U.S. Department of Health and Human Services
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 weeks(177 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.