DisclosureLens
HackingHealthcareHealthcareStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

Florence County Commission on Alcohol & Drug Abuse

bd_442bba1ebe11f9a6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 8, 2025

Filed

Jan 14, 2026

To disclose

45 weeks

Affected

1state residents only

Linked

4 filings

Confidence

67%
Full breach record for Florence County Commission on Alcohol & Drug Abuse →

Florence County Commission on Alcohol & Drug Abuse (dba Circle Park Behavioral Health Services) notified the New Hampshire Attorney General of a data security incident affecting 1 NH resident. On March 8, 2025, the organization detected unusual activity in its environment, leading to an investigation that revealed unauthorized access to employee email accounts. The incident potentially exposed personal information (names, SSN, driver's license, DOB) and protected health information (insurance, treatment history). Notification letters were mailed on December 30, 2025, offering identity protection services.

Incident timeline

discovery → filing · 45 weeks / 312 days

Mar 8, 2025

Discovered

Jan 14, 2026

Filed

vs. sector median

+32 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 3 states

View merged incident ↗
Vermont State AGJan 14 · first
South Carolina State AGJan 14 · first
HHS OCRJan 14 · first
New Hampshire State AGJan 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.