HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Operation PAR, Inc, Boley Centers, Inc. and PEMHS
bd_31b2ab732e37a81a · schema v1 · pii pii-v1
Full breach record for Operation PAR, Inc, Boley Centers, Inc. and PEMHS →Operation PAR, Inc., Boley Centers, Inc., and PEMHS dba Eleos notified the New Hampshire Attorney General of a cybersecurity incident affecting 65 New Hampshire residents. Unauthorized access occurred between June 6, 2025, and June 10, 2025. Impacted data included names, DOB, driver's license numbers, health insurance info, and SSNs. The entities engaged external cybersecurity professionals, secured the network, and offered one year of credit monitoring to affected residents. Notification was sent on June 25, 2026.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed65 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/operation-par-boley-centers-pemhs-eleos-20260629.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 29, 2026
- Raw hash
- 7c2f9998ceafe702f300a0ae42edeb1ad69eee6746f4f36ea569940f9dfacdf4
Reporting entity
- Name
- Operation PAR, Inc, Boley Centers, Inc. and PEMHSnorm: operation par inc boley centers inc and pemhs
Victim entity
- Name
- Operation PAR, Inc, Boley Centers, Inc. and PEMHSnorm: operation par inc boley centers inc and pemhs
Incident
- Discovered
- Jun 10, 2026
- Materiality determined
- —
- Notification sent
- Jun 25, 2026
- Affected individuals
- 65
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.