HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained

Lake Region Healthcare

bd_97aa43855a0cfbcf · schema v1 · pii pii-v1

Full breach record for Lake Region Healthcare →

Lake Region Healthcare Corporation notified the New Hampshire Attorney General on July 7, 2026, regarding unauthorized network access detected on May 19, 2025. The incident potentially affected approximately six New Hampshire residents, exposing names, dates of birth, medical information, health insurance details, and Social Security numbers. Lake Region secured its network, notified law enforcement, and engaged external cybersecurity professionals. Affected individuals received written notice on July 1, 2026, and were offered one year of complimentary identity monitoring services.

Leak gap clock✗ Leak >180d14 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6 affectedView incident

A leak claim by worldleaks about this victim predates this filing by 417 days.View originating leak claim

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lake-region-healthcare-20260707.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 7, 2026
Raw hash: 793f775a19bda2310c8ad00632f6bba60991098243870c76b57304eb5c29e790

Reporting entity

Name: McDonald
norm: mcdonald
Domain: mcdonalds-menus.us

Victim entity

Name: Lake Region Healthcare
norm: lake region healthcare
Domain: lrhc.org

Incident

Discovered: May 19, 2025
Materiality determined: —
Notification sent: Jul 1, 2026
Affected individuals: 6
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Initial access: exploit_public_facing

Compliance

Time to disclose: 14 months(414 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.