HackingCustomer Data InvolvedEmployee Data InvolvedPIIPHIIDENTITY_BASICHEALTH_BASICLowContained
Bay Cove Human Services, Inc.
bd_97d3b4169cd24946 · schema v1 · pii pii-v1
Full breach record for Bay Cove Human Services, Inc. →Bay Cove Human Services, Inc. notified the New Hampshire Attorney General on March 4, 2025, that a data security incident discovered on December 30, 2024, may have exposed personal and protected health information of 49 NH residents. The specific data accessed was not identified. Bay Cove engaged cybersecurity experts, secured systems, and offered 12 months of credit monitoring and identity theft protection services.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_354b3be519e69893Maine State AGfiled 2025-03-04Verified
- bd_276c429fca980a62HHS OCRfiled 2025-03-03(1d gap)Verified
- bd_79885ea9c07889f5Vermont State AGfiled 2025-03-03(1d gap)Verified
- bd_d999f6aae5ecda38Indiana State AGfiled 2025-03-03(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_e1baf59f2f15c475Maryland State AGfiled 2025-03-03(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bay-cove-human-services-20250304.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 4, 2025
- Raw hash
- 67ad3e9a4b9cc4a220ab110d6d4398eb8d46442e0e12f8cf469e1f48118e06da
Reporting entity
- Name
- Bay Cove Human Services, Inc.norm: bay cove human
Victim entity
- Name
- Bay Cove Human Services, Inc.norm: bay cove human
Incident
- Discovered
- Dec 30, 2024
- Materiality determined
- —
- Notification sent
- Mar 3, 2025
- Affected individuals
- 49
- Data types
- PIIPHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Attorney General John Formella
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.