Kentucky Mountain Health Alliance, Inc.
bd_7659d88af43fd86f · schema v1 · pii pii-v1
Full breach record for Kentucky Mountain Health Alliance, Inc. →Kentucky Mountain Health Alliance, Inc. (KMHA) notified the NH Attorney General of a data breach affecting one New Hampshire resident. On or around September 16, 2025, KMHA identified unauthorized access to its network. An investigation determined an unauthorized individual viewed and obtained files containing PHI, SSNs, driver's license numbers, financial account info, and medical information. KMHA took systems offline, engaged a cybersecurity firm, and notified law enforcement. The affected resident was notified on June 12, 2026, and offered one year of complimentary identity monitoring services through Epiq.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 16, 2025
Discovered
Jun 19, 2026
Filed
vs. sector median
+28 wks slower
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Massachusetts State AGbd_83a570f28d6f876d2026-06-19Verified
- HHS OCRbd_f6c79ff4e60a31f72026-06-19Verified
- Indiana State AGbd_a107d4aed7ab0f652026-06-12 · +7dCandidate
- Nebraska State AGbd_ee88b9760195797d2026-06-12 · +7dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Jun 12 (IN), last Jun 19 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.