HackingHealthcareFinancial ServicesHealthcareTargetedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Space Coast Vascular

bd_41cdce424d3de7e8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 7, 2025

Filed

Oct 10, 2025

To disclose

9 weeks

Affected

8state residents only

Linked

6 filings

Confidence

67%

Full breach record for Space Coast Vascular →

Space Coast Vascular notified the NH Attorney General of a criminal cyberattack affecting 8 NH residents. Discovered Aug 7, 2025. Data involved: names, DOB, SSN, driver's licenses, medical/insurance info, financial accounts. SCV secured systems, replaced firewalls, and offered 12 months credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 64 days

Aug 7, 2025

Discovered

Oct 10, 2025

Filed

vs. sector median

2 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_96c24d1945f2efe82025-10-09 · +1dVerified
HHS OCRbd_16590c331d4fccfd2025-10-06 · +4dVerified
Maine State AGbd_1f9abb34c721de022025-10-06 · +4dVerified
Indiana State AGbd_9666806afdb0284f2025-10-06 · +4dCandidate

Show 1 more filing ↓up to 4d gap

Nebraska State AGbd_a1276c376eaec6832025-10-06 · +4dVerified

Name: Jackson Lewis
norm: jackson lewis
Domain: jacksonlewis.com

Name: Space Coast Vascular
norm: space coast vascular
Industry: HealthcarellmFinancial Servicesllm

Discovered: Aug 7, 2025
Materiality determined: —
Notification sent: Oct 6, 2025
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Took immediate steps to secure its systems
Investigated the nature and scope of the Incident
Provided notice to the affected New Hampshire residents
Arranged for the individuals to enroll in free credit monitoring and related services for at least 12 months
Replaced its firewall and all of the systems impacted by the incident
Hardened its existing security monitoring software
Strengthened its email security system
Reviewed and upgraded its data security policies and procedures
Changes made: Replaced its firewall and all of the systems impacted by the incident
Hardened its existing security monitoring software
Strengthened its email security system
Reviewed and upgraded its data security policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(64 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

HHS OCROct 6 · first

Maine State AGOct 6 · first

Indiana State AGOct 6 · first

Nebraska State AGOct 6 · first

Massachusetts State AG+3d

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/space-coast-vascular-20251010.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 10, 2025
Raw hash: 34bd946ccadbc83306804e9ebe7ea954def48eb56d2dc9a04374971d3695a882

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityJackson Lewis

Victim entitySpace Coast Vascular

Incidentdiscovered Aug 7, 2025

Stated responseTook immediate steps to secure its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov