HackingSupply Chain (3P Vendor)Customer Data InvolvedDownstream VictimsIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Haymaker Enterprises
bd_96b9488f07b11bf4 · schema v1 · pii pii-v1
Full breach record for Haymaker Enterprises →Haymaker Enterprises dba Triage Staffing notified the NH AG of a third-party breach involving Aya Healthcare. An unauthorized actor accessed files containing names, DOBs, and SSNs of 50 NH residents on May 1, 2025. Triage was notified on May 13, confirmed scope on June 13, and mailed notices on July 7, offering 1 year of credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_014dc4cd77f51bffMaine State AGfiled 2025-07-07Verified
- bd_57454f38416a77c1Montana State AGfiled 2025-07-07Candidate
- bd_adb98e02d9b2934dVermont State AGfiled 2025-07-07Verified
- bd_1b41cc631dbd47abTexas State AGfiled 2025-07-08(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/haymaker-enterprises-triage-staffing-20250707.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2025
- Raw hash
- c866269493afac49db154eb151a4b9860abbdec19cffbe45483a35dd73c76ea2
Reporting entity
- Name
- Haymaker Enterprisesnorm: haymaker enterprises
Victim entity
- Name
- Haymaker Enterprisesnorm: haymaker enterprises
Incident
- Discovered
- May 13, 2025
- Materiality determined
- Jun 13, 2025
- Notification sent
- Jul 7, 2025
- Affected individuals
- 50
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified Attorney General John Formella
- Third party
- via Aya Healthcare
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.