MalwareRansomwareData ExfiltratedData EncryptedRansom DemandedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Arc Community Services Inc
bd_8afcb8ef26623bba · schema v1 · pii pii-v1
Full breach record for Arc Community Services Inc →ARC Community Services reported a ransomware incident to the New Hampshire Attorney General on December 4, 2025. The breach, discovered on November 4, 2024, involved unauthorized access by an actor identified as 'INC', resulting in the encryption of files and exfiltration of PII (names and SSNs) affecting 2 NH residents. Notices were sent in October and December 2025, offering credit monitoring.
Leak gap clock✗ Leak >180d13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
A leak claim by inc_ransom about this victim predates this filing by 398 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/arc-community-services-20251204.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 4, 2025
- Raw hash
- 8b8c1ca41d54c1e50fcf3c68aa22f58769f811561ea524676a69d220e00d9dfd
Reporting entity
- Name
- Arc Community Services Incnorm: arc community
- Domain
- arccommserv.com
Victim entity
- Name
- Arc Community Services Incnorm: arc community
- Domain
- arccommserv.com
Incident
- Discovered
- Nov 4, 2024
- Materiality determined
- —
- Notification sent
- Oct 6, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- filed a report to the Office for Civil Rights with the Department of Health and Human Services
Compliance
- Time to disclose
- 13 months(395 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.