UnknownGovernmentGovernmentCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowContained

County of Catawba

bd_67ecea990e86bd2c · schema v1 · pii pii-v2

Severity

Low

Discovered

Sep 20, 2025

Filed

Oct 16, 2026

To disclose

13 months

Affected

7state residents only

Linked

4 records

Confidence

70%

Full breach record for County of Catawba →

Catawba County, NC discovered a data security incident on September 20, 2025, involving unauthorized access to files containing personal information (including medical and health insurance data) between September 12-19, 2025. The County secured the environment, engaged third-party specialists, and notified 7 New Hampshire residents on September 15, 2026. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d13 months discovery → filing

Incident timeline

undetected · 8 days

discovery → filing · 13 months / 391 days

Sep 12, 2025

Begins

Sep 20, 2025

Discovered

Oct 16, 2026

Filed

This filing is one of 4 records about the same incident.View merged incident

A leak claim by qilin about this victim was first seen 367 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteqilinbd_f60abc82c8cfdc862025-09-19 · +392dVerified by operator

Regulatory filings (2) · sorted by filing gap

Vermont State AGbd_4972740ceee827232026-10-17 · +1dVerified by operator
HHS OCRbd_da550552a05188972025-11-19 · +331dCandidate

Name: County of Catawba
norm: county of catawba
Domain: catawbacountync.gov

Name: County of Catawba
norm: county of catawba
Domain: catawbacountync.gov
Industry: Governmentllm

Discovered: Sep 20, 2025
Breach occurred: Sep 12, 2025 – Sep 19, 2025
Undetected for: 8 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 15, 2026
Affected individuals: 7state-resident count only
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Unknown
Regulator citations: Notified New Hampshire Attorney General

During the incident: Secured and remediated the environment
Engaged additional third-party specialists
Enhanced its data security
Commenced an investigation
Providing complimentary credit monitoring and identity protection services for twelve (12) months through Cyberscout
Changes made: Hardened and enhanced our data security
Implemented additional security measures
Reviewed policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(391 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

HHS OCRNov 19 · first

New Hampshire State AG+331d · this page

Vermont State AG+332d

Pattern: first filing Nov 19 (NC), last Oct 17 (VT) — a 332-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/catawba-county-north-carolina-20261016.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 16, 2026
Raw hash: 6e3f8954ac324880413690cdde02c5f684493a594880e5b78b5a64e55dee8974

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityCounty of Catawba

Victim entityCounty of Catawba

Incidentdiscovered Sep 20, 2025

Stated responseSecured and remediated the environment

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov