Pinnacle Holding Co
bd_5f282b433fab8135 · schema v1 · pii pii-v1
Full breach record for Pinnacle Holding Co →New Hampshire Attorney General received a notice from Community Psychiatry Management, LLC (dba Mindpath Health) regarding a security incident involving its vendor, Pinnacle Holdings, LTD. The incident involved unauthorized access to Pinnacle's systems between November 11 and November 25, 2024, affecting 4 New Hampshire residents. Data potentially exposed included patient names, SSNs, driver's licenses, financial account info, payment card info, online credentials, biometric data, and medical information. Pinnacle reported the incident to HHS OCR, and Mindpath filed this state-level notice. Remediation included offering 12 months of credit monitoring.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9e07fa21ed3ab4b2South Carolina State AGfiled 2026-05-22(38d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/community-psychiatry-management-mindpath-health-20260414.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 14, 2026
- Raw hash
- dfe4b008be1fcc385dc19cc662f2453b95e1a96d6958cfcb28e433b31ee2e7e9
Reporting entity
- Name
- Community Psychiatry Management LLCnorm: community psychiatry management
Victim entity
- Name
- Pinnacle Holding Conorm: pinnacle holding
- Domain
- pinnacleholdingco.com
Incident
- Discovered
- Nov 25, 2024
- Materiality determined
- —
- Notification sent
- Mar 9, 2026
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICAUTHENTICATIONBIOMETRIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Department of Health and Human Services Office for Civil RightsSubmitted notice to New Hampshire Office of the Attorney General
- Initial access
- supply_chain
Compliance
- Time to disclose
- 17 months(505 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.