HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
NEVRO CORP.
bd_9385df3948cc112d · schema v1 · pii pii-v1
Full breach record for NEVRO CORP. →Nevro Corp. notified the New Hampshire Attorney General on April 2, 2025, of a data event affecting approximately 10 state residents. Unauthorized access occurred between November 21 and December 1, 2024, when an unknown individual accessed systems and potentially exfiltrated personal information. Nevro discovered the activity on December 1, 2024, and completed its review on March 14, 2025. Response measures included engaging third-party cybersecurity specialists, notifying federal law enforcement, and offering credit monitoring services through Cyberscout.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2f15681c90c24378California State AGfiled 2025-04-02Candidate
- bd_9bdd3acd8143be1fIndiana State AGfiled 2025-04-02Verified
- bd_b94fba3fd31eb0e4Maine State AGfiled 2025-04-02Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/nevro-corp-20250402.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 2, 2025
- Raw hash
- 0bd210ce3b9cac550bddc0022d3fd28a935fdaadd739e583799ca3592dd6bfcb
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- NEVRO CORP.norm: nevro
- Domain
- nevro.com
Incident
- Discovered
- Dec 1, 2024
- Materiality determined
- —
- Notification sent
- Apr 2, 2025
- Affected individuals
- 10
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- provided written notice of this event to relevant state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(122 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.