Social EngineeringGovernment IDIdentity (basic)MediumContained

Triad Radiology Associates

bd_7ed8bc23f025789c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 30, 2025

Filed

Feb 11, 2026

To disclose

28 weeks

Affected

2state residents only

Confidence

66%

Full breach record for Triad Radiology Associates →3 incidents on file

Triad Radiology Associates (TRA) notified the New Hampshire Attorney General of a data incident involving unauthorized access to an employee email account. Access occurred between July 11 and July 30, 2025, discovered on July 30, 2025. The breach affected 2 New Hampshire residents, exposing names and Social Security numbers. TRA engaged third-party specialists, secured the account, and sent notices on February 11, 2026, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 19 days

discovery → filing · 28 weeks / 196 days

Jul 11, 2025

Begins

Jul 30, 2025

Discovered

Feb 11, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Cipriani
norm: cipriani
Domain: cipriani.com

Name: Triad Radiology Associates
norm: triad radiology associates

Discovered: Jul 30, 2025
Breach occurred: Jul 11, 2025 – Jul 30, 2025
Undetected for: 19 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 11, 2026
Affected individuals: 2state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: phishing_link

During the incident: Secured the account
Engaged a team of third-party specialists to assist with determining the full nature and scope of the incident
Reviewed the contents of the email account
Sent written notice of this incident to the potentially impacted New Hampshire residents
Offer of complimentary credit monitoring and identity protection services for twelve (12) months
Changes made: Taking appropriate actions to rectify the situation and prevent such incidents in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(196 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/triad-radiology-associates-20260211.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 11, 2026
Raw hash: 7203f9941c90074f27abc7a098900af1eb5a0f72be42fb4a72bdce892ba27b58

Reporting entityCipriani

Victim entityTriad Radiology Associates

Incidentdiscovered Jul 30, 2025

Stated responseSecured the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov