HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICHighContained
Mid Florida Primary Care
bd_804512335ec0db12 · schema v1 · pii pii-v1
Full breach record for Mid Florida Primary Care →Mid Florida Primary Care, PA reported a data breach affecting 16,435 individuals, including 16 New Hampshire residents. Unauthorized access occurred between Nov 29 and Dec 11, 2024, discovered Jan 23, 2025. Exposed data included names, SSNs, driver's licenses, and PHI. The organization engaged forensic investigators, secured its network, and offered 12 months of credit monitoring.
Leak gap clock✗ Leak >180d28 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 236 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_1340dbb6985b2051Vermont State AGfiled 2025-07-29(6d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mid-florida-primary-care-20250804.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 4, 2025
- Raw hash
- e5f81f5065ce566ce077e94ce163a95e6807be829786454039b0fb667cedb1c2
Reporting entity
- Name
- Mid Florida Primary Carenorm: mid florida primary care
- Domain
- mymfpc.com
Victim entity
- Name
- Mid Florida Primary Carenorm: mid florida primary care
- Domain
- mymfpc.com
Incident
- Discovered
- Jan 23, 2025
- Materiality determined
- Jun 19, 2025
- Notification sent
- Jul 29, 2025
- Affected individuals
- 16,435
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 weeks(193 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.