HackingSupply Chain (3P Vendor)Data ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Community Nurse
bd_8744b5e8af8269cd · schema v1 · pii pii-v1
Full breach record for Community Nurse →Community Nurse, a home health care provider, notified the New Hampshire Attorney General of a data security incident involving its third-party vendor, Doctor Alliance. Unauthorized access to personal and health information occurred between October 31 and November 17, 2025. The incident affected approximately 8 New Hampshire residents, exposing names, addresses, DOBs, Medicare numbers, and medical records. Community Nurse engaged forensic specialists, notified the FBI, and sent notification letters on March 11, 2026.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9bf2483307755284Maine State AGfiled 2026-03-12Verified
- bd_d2a3275a6cfa49eeHHS OCRfiled 2026-03-12Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/community-nurse-20260312.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 12, 2026
- Raw hash
- f4ac32e9a37c0313ace40ade05636e86a3e9d8a3d29a34aec67c7626149443c9
Reporting entity
- Name
- Constangy, Brooks, Smith & Prophete, LLPnorm: constangy brooks smith prophete
Victim entity
- Name
- Community Nursenorm: community nurse
Incident
- Discovered
- Jan 12, 2026
- Materiality determined
- —
- Notification sent
- Mar 11, 2026
- Affected individuals
- 8
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Third party
- via Doctor Alliance
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.