Averhealth Holdings
bd_9df113154ca2a6b7 · schema v1 · pii pii-v1
Full breach record for Averhealth Holdings →Averhealth Holdings detected unusual activity in its email environment on January 20, 2026. An investigation concluded on May 6, 2026, that personal information of 12 New Hampshire residents may have been accessed. Affected data included names, dates of birth, diagnoses, health insurance policy numbers, medical costs, dates of service, provider names, medical record numbers, and treatment information. Social Security numbers were not affected. The company secured the email environment, engaged cybersecurity professionals, and offered one year of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 20, 2026
Discovered
Jul 20, 2026
Filed
vs. sector median
+13 wks slower
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- Vermont State AGbd_61124ed0d7b945af2026-07-15 · +5dVerified
- Massachusetts State AGbd_17f50c1a37bd6a4c2026-07-07 · +13dVerified
- HHS OCRbd_f6ed28c3b18e73b42026-07-02 · +18dVerified
Filing propagation · 4 filings · 4 states
View merged incident ↗Pattern: first filing Jul 2 (VA), last Jul 20 (NH) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.