Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Fyzical Acquisition Holdings, LLC
bd_6417337e214eaab7 · schema v1 · pii pii-v1
Full breach record for Fyzical Acquisition Holdings, LLC →Fyzical Acquisition Holdings, LLC, a physical therapy franchisor, notified the New Hampshire Attorney General of a data event affecting 6 NH residents. The breach involved unauthorized access to email data via phishing, exposing names, DOB, SSNs, financial account info, and PHI. Notification letters were mailed on Dec 19, 2025. Fyzical engaged forensic investigators and offered credit monitoring and identity theft recovery services.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/fyzical-acquisition-20251219.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2025
- Raw hash
- 5a219e05498a41bfde0a9b418f75ecd166cecdf9924e5728c0ea67c152b5dd76
Reporting entity
- Name
- Fyzical Acquisition Holdings, LLCnorm: fyzical acquisition
Victim entity
- Name
- Fyzical Acquisition Holdings, LLCnorm: fyzical acquisition
Incident
- Discovered
- Dec 9, 2024
- Materiality determined
- —
- Notification sent
- Dec 19, 2025
- Affected individuals
- 6
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- phishing_link
Compliance
- Time to disclose
- 13 months(375 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.