HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
DRH Health
bd_7e2688e4f8f3b005 · schema v1 · pii pii-v1
Full breach record for DRH Health →Nationwide Recovery Services, Inc. (NRS), a third-party vendor for DRH Health, experienced unauthorized access to its network between July 5-11, 2024. NRS discovered suspicious activity in July 2024. One New Hampshire resident was notified on April 25, 2025. Personal information, potentially including identity data, was copied. NRS engaged law enforcement, took systems offline, and implemented enhanced security. DRH Health provided credit monitoring services.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/nationwide-recovery-services-20250425.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 25, 2025
- Raw hash
- 9f56d4f1ef98286699cf31e4f51ad8e21f07692882048381c3175e421dff07e8
Reporting entity
- Name
- Nationwide Recovery Services, Inc.norm: nationwide recovery
Victim entity
- Name
- DRH Healthnorm: drh health
- Domain
- duncanregional.com
Incident
- Discovered
- Jul 1, 2024
- Materiality determined
- Feb 28, 2025
- Notification sent
- Apr 25, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotifying the Department of Health of Human Services
- Third party
- via Nationwide Recovery Services, Inc.
Compliance
- Time to disclose
- 43 weeks(298 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.