HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Central Texas MHMR Center

bd_829891e97ffbf36a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 17, 2025

Filed

Jul 22, 2026

To disclose

35 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for Central Texas MHMR Center →2 incidents on file

Central Texas MHMR dba Center for Life Resources experienced unauthorized access to its internal network between November 14-15, 2025, discovered on November 17, 2025. An unknown actor copied and potentially viewed files containing names and Social Security numbers. One New Hampshire resident was affected. The organization secured the network, engaged cybersecurity specialists, notified law enforcement and HHS, and is providing 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 35 weeks / 247 days

Nov 14, 2025

Begins

Nov 17, 2025

Discovered

Jul 22, 2026

Filed

vs. sector median

+23 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_169e0607bd9dd9bc2026-07-22Candidate
Vermont State AGbd_4c7ceaa1fb482f292026-07-22Verified
Nebraska State AGbd_e51e7467e843458c2026-07-22Verified
Texas State AGbd_4b94a33a642beb292026-07-23 · +1dVerified

Name: Central Texas MHMR dba Center for Life Resources
norm: central texas mhmr center for life resources

Name: Central Texas MHMR Center
norm: central texas mhmr center
Also named: Central Texas MHMRdba oflegal entity
Center for Life Resourcesdba oftrade name
Industry: Healthcarellm

Discovered: Nov 17, 2025
Breach occurred: Nov 14, 2025 – Nov 15, 2025
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 22, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified federal law enforcementNotified the U.S. Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability ActProvided written notice to relevant state regulators

During the incident: Immediate action was taken to secure the network and to ensure that client care was not disrupted
CFLR promptly launched an investigation with assistance from cybersecurity specialists
CFLR notified federal law enforcement regarding the event
CFLR has also implemented additional safeguards
CFLR is providing access to credit monitoring services for twelve (12) months, through TransUnion, to individuals whose Social Security numbers were potentially affected by this incident, at no cost to these individuals
CFLR is providing impacted individuals with guidance on how to better protect against identity theft and fraud
CFLR is providing written notice of this incident to relevant state regulators, as required, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
CFLR has also notified the U.S. Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act
Changes made: CFLR is working to review existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(247 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGJul 22 · first

Vermont State AGJul 22 · first

Nebraska State AGJul 22 · first

New Hampshire State AGJul 22 · first · this page

Texas State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/central-texas-mhmr-center-life-resources-20260722.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2026
Raw hash: e91564dcae9ccc36b30e1c8ec74171c96f9da494343298d5530e49fb9435d388

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCentral Texas MHMR dba Center for Life Resources

Victim entityCentral Texas MHMR Center

Incidentdiscovered Nov 17, 2025

Stated responseImmediate action was taken to secure the network and to ensure that client care was not disrupted

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov