CPR AED Course LLC
bd_804000822adb79ab · schema v1 · pii pii-v1
Full breach record for CPR AED Course LLC →American Health Care Academy (AHCA) notified the NH Attorney General of a data event affecting 166 New Hampshire residents. On November 29, 2020, AHCA detected unusual activity related to customer payment cards. An investigation revealed a webshell capable of accessing information in AHCA's environment. The potentially compromised data included first and last names and debit/credit card numbers. AHCA engaged forensic investigators, reset passwords, and ceased storing payment card information. Notices were sent to affected individuals on March 15, 2021.
J jump to incidentP pin to compareR raw source
Incident timeline
Nov 29, 2020
Discovered
Mar 22, 2021
Filed
vs. sector median
+8 wks slower
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Washington State AGbd_4efa9d455c5eccc22021-03-15 · +7dCandidate
- Indiana State AGbd_562e0ba39cea18972021-03-15 · +7dVerified
- Massachusetts State AGbd_5fa2a7f2c42280982021-03-15 · +7dVerified
- Montana State AGbd_7758fc79eaa35ddc2021-03-15 · +7dVerified
Show 3 more filings ↓Show fewer ↑up to 7d gap
- Maine State AGbd_91ac8b35681b41e22021-03-15 · +7dVerified
- Oregon State AGbd_d9d9a046a916bef32021-03-15 · +7dVerified
- California State AGbd_f8aec2fb07d080f52021-03-15 · +7dVerified
Filing propagation · 8 filings · 8 states
View merged incident ↗Pattern: first filing Mar 15 (WA), last Mar 22 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.