HackingHealthcareHealthcareCustomer Data InvolvedGovernment IDHealth (basic)Identity (basic)MediumContained

Couve Healthcare Consulting, LLC

bd_852f81a47d7f8bcf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 3, 2025

Filed

Feb 24, 2026

To disclose

12 weeks

Affected

1state residents only

Linked

5 filings

Confidence

67%

Full breach record for Couve Healthcare Consulting, LLC →

Couve Healthcare Consulting, LLC DBA Evergreen Healthcare Group (EHG) notified the New Hampshire Attorney General of a cybersecurity incident discovered on December 3, 2025, involving unauthorized access to its cloud-based healthcare platform. One New Hampshire resident was affected, with compromised data including Social Security Numbers, medical information, and names. EHG engaged forensic investigators, isolated systems, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 83 days

Dec 3, 2025

Discovered

Feb 24, 2026

Filed

vs. sector median

1 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_1a66dc982979ed802026-02-24Candidate
California State AGbd_983cd74e489d7f9d2026-02-24Verified
HHS OCRbd_b00abeed2ac582162026-02-24Verified
Indiana State AGbd_e24eacec5374d80d2026-02-24Verified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Couve Healthcare Consulting, LLC
norm: couve healthcare consulting
Also named: Couve Healthcare Consulting, LLCdba oflegal entity
Evergreen Healthcare Groupdba oftrade name
Industry: Healthcarellm

Discovered: Dec 3, 2025
Materiality determined: —
Notification sent: Feb 24, 2026
Affected individuals: 1state-resident count only
Data types: Government IDHealth (basic)Identity (basic)
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General John M. Formella
Initial access: exploit_public_facing

During the incident: Immediately implemented their incident response plan
Began an investigation into the nature and scope of the issue
Isolated the impacted systems
Worked with our IT professionals and outside experts to secure and remediate these systems
Engaged a third-party cybersecurity firm to conduct a comprehensive forensic investigation
Changes made: Implementing additional technical safeguards
Enhanced security measures
Updated procedures to mitigate against the risk of future issues
Offered all impacted individuals with complimentary credit monitoring and identity theft protection services by Cyberscout, a TransUnion Company, for a period of twelve (12) months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(83 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGFeb 24 · first

California State AGFeb 24 · first

HHS OCRFeb 24 · first

Indiana State AGFeb 24 · first

New Hampshire State AGFeb 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/couve-healthcare-consulting-evergreen-healthcare-group-20260224.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 24, 2026
Raw hash: 0036a12d583b6746fc6566f9de052b4caf53dffff46474bc3de548c0fff1fd81

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityCouve Healthcare Consulting, LLC

Incidentdiscovered Dec 3, 2025

Stated responseImmediately implemented their incident response plan

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov