DisclosureLens
HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPHIGovernment IDIdentity (basic)Health (basic)MediumContained

Terry J. Dubrow, MD, A Medical Corporation

bd_40fade2712071d93 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 30, 2026

Filed

Aug 13, 2026

To disclose

11 weeks

Affected

9state residents only

Linked

7 filings

Confidence

66%

Terry J. Dubrow, MD, A Medical Corporation notified the NH Attorney General of a data security incident. An unauthorized actor accessed the Practice's network starting January 16, 2025, and acquired data including patient names, SSNs, driver's license numbers, and medical information. The Practice became aware of the incident on May 30, 2026, when contacted by the actor. Nine New Hampshire residents were affected. The incident is contained, and the Practice engaged forensic experts, secured systems, and offered identity protection services.

Incident timeline

undetected · 499 days
discovery → filing · 11 weeks / 75 days

Jan 16, 2025

Begins

May 30, 2026

Discovered

Aug 13, 2026

Filed

vs. sector median

+2 wks slower

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Show 2 more filings ↓up to 1d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗
Nebraska State AGAug 13 · first
Indiana State AGAug 13 · first
Vermont State AGAug 13 · first
California State AGAug 13 · first
Massachusetts State AGAug 13 · first
New Hampshire State AGAug 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.