HackingCustomer Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Operation PAR, Inc, Boley Centers, Inc. and PEMHS
bd_782bd559bed778ef · schema v1 · pii pii-v1
Full breach record for Operation PAR, Inc, Boley Centers, Inc. and PEMHS →Operation PAR, Inc., Boley Centers, Inc., and PEMHS dba Eleos notified Massachusetts residents of a cybersecurity incident occurring between June 6 and June 10, 2025. Unauthorized access resulted in the potential exposure of personal information, including names and Social Security numbers. The entities secured their network, engaged external forensic experts, and are offering complimentary credit monitoring via Epiq. No evidence of financial fraud was found at the time of notification.
Massachusetts clock✗ MA AG >90d51 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-1031-operation-par-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 1, 2026
- Raw hash
- 2cd31c1d57e26d549bfe69cad26f2a18ce7c63106c5001b0d835e89ca5d4561a
Reporting entity
- Name
- Operation PAR, Inc.norm: operation par
- Domain
- operationpar.org
Victim entity
- Name
- Operation PAR, Inc, Boley Centers, Inc. and PEMHSnorm: operation par inc boley centers inc and pemhs
Incident
- Discovered
- Jun 10, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 51 weeks(356 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.