HackingHealthcareHealthcareData MishandlingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

BAYADA Home Health Care, Inc.

bd_9325a5273401c647 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 4, 2025

Filed

Jan 30, 2026

To disclose

8 weeks

Affected

6state residents only

Linked

4 filings

Confidence

66%

Full breach record for BAYADA Home Health Care, Inc. →3 incidents on file

BAYADA Home Health Care, Inc. notified the New Hampshire Attorney General of a cybersecurity event involving third-party vendor Doctor Alliance. Unauthorized actors accessed Doctor Alliance systems between October 31 and November 17, 2025, potentially copying client information including names and Social Security numbers. BAYADA identified 6 affected New Hampshire residents, notified them on January 30, 2026, and reported the incident to federal law enforcement. BAYADA ceased using Doctor Alliance services and offered one year of credit monitoring through Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 34 days

discovery → filing · 8 weeks / 57 days

Oct 31, 2025

Begins

Dec 4, 2025

Discovered

Jan 30, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Part of Doctor Alliance supply-chain incident (2026) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_3f4dc2a856c57c242026-01-30Verified
HHS OCRbd_939cd2dc635e16082026-01-30Verified
Vermont State AGbd_958c0384586962d32026-01-30Verified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: BAYADA Home Health Care, Inc.
norm: bayada home health care
Industry: Healthcarellm

Discovered: Dec 4, 2025
Breach occurred: Oct 31, 2025 – Nov 17, 2025
Undetected for: 34 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 30, 2026
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: External
Initial access: supply_chain

During the incident: Ceased ongoing use of services from Doctor Alliance
Identified potentially impacted individuals to provide notice
Reported the Doctor Alliance event to federal law enforcement
Provided access to credit monitoring and identity restoration services for one (1) year, through Experian, at no cost
Provided potentially affected individuals with guidance on how to better protect against identity theft and fraud
Provided written notice of the Doctor Alliance event to appropriate governmental regulators and to the three major consumer reporting agencies
Issuing notice on its website and to prominent media outlets in appropriate jurisdictions
Changes made: Reviewing its administrative and technical safeguards related to its other third-party vendors to mitigate the risk of recurrence
Reviewing existing policies and procedures with its third-party vendors to minimize the risk of a similar event in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGJan 30 · first

HHS OCRJan 30 · first

Vermont State AGJan 30 · first

New Hampshire State AGJan 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bayada-home-health-care-20260130.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 30, 2026
Raw hash: 91b0f04eb058d9bf4834f5ba8a9c6992702c1cc28a8f8997d11bfb930e8a34cc

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityBAYADA Home Health Care, Inc.

Incidentdiscovered Dec 4, 2025

Stated responseCeased ongoing use of services from Doctor Alliance

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov