DisclosureLens
HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedHealth (basic)Identity (basic)Government IDMediumContained

Operation PAR, Inc, Boley Centers, Inc. and PEMHS

bd_782bd559bed778ef · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 10, 2025

Filed

Jun 25, 2026

To disclose

13 months

Affected

375state residents only

Linked

2 filings

Confidence

66%
Full breach record for Operation PAR, Inc, Boley Centers, Inc. and PEMHS →2 incidents on file

Operation PAR, Inc., Boley Centers, Inc., and PEMHS dba Eleos notified Massachusetts residents of a cybersecurity incident occurring between June 6 and June 10, 2025. Unauthorized access resulted in the potential exposure of personal information, including names and Social Security numbers. The entities secured their network, engaged external forensic experts, and are offering complimentary credit monitoring via Epiq. No evidence of financial fraud was found at the time of notification.

Massachusetts clock✗ MA AG >90d13 months discovery → filing

Incident timeline

undetected · 4 days
discovery → filing · 13 months / 380 days

Jun 6, 2025

Begins

Jun 10, 2025

Discovered

Jun 25, 2026

Filed

vs. sector median

+42 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Nebraska State AGJun 25 · first
Massachusetts State AGJun 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.