HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Glendale Obstetrics & Gynecology PCA

bd_9f87e35c289085be · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 25, 2025

Filed

Apr 13, 2026

To disclose

24 weeks

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for Glendale Obstetrics & Gynecology PCA →2 incidents on file

Glendale Obstetrics & Gynecology notified the New Hampshire Attorney General of a data security incident discovered on October 25, 2025, involving unauthorized acquisition of files containing names and Social Security numbers. One New Hampshire resident was affected. Notification was sent on April 9, 2026, offering 12 months of credit monitoring through TransUnion. The incident status is contained.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 24 weeks / 170 days

Oct 25, 2025

Discovered

Apr 13, 2026

Filed

vs. sector median

+12 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_b60e6375970367a42026-04-09 · +4dVerified
Massachusetts State AGbd_b517ece5cd64d8882026-05-26 · +43dVerified

Name: Glendale Obstetrics & Gynecology PCA
norm: glendale obstetrics gynecology pca

Name: Glendale Obstetrics & Gynecology PCA
norm: glendale obstetrics gynecology pca
Industry: Healthcarellm

Discovered: Oct 25, 2025
Materiality determined: —
Notification sent: Apr 9, 2026
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection & Antitrust Bureau

During the incident: Launched an investigation to determine the nature and scope of the incident
Reviewed those files to determine the nature of the information contained therein
Worked diligently to identify contact information necessary to notify such potentially impacted individuals
Provided written notice of this Incident to one (1) New Hampshire resident
Working to implement additional safeguards to bolster its security
Providing additional employee training
Providing access to credit monitoring and identity protection services for 12 months, through TransUnion
Changes made: Implemented additional security features to reduce the risk of a similar incident occurring in the future
Providing additional employee training
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(170 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGApr 9 · first

New Hampshire State AG+4d · this page

Massachusetts State AG+47d

Pattern: first filing Apr 9 (MT), last May 26 (MA) — a 47-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/glendale-obstetrics-gynecology-20260413.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 13, 2026
Raw hash: 98312b5ca3444c6fe74cd28cf117e152bffb58e1c6e9141890fc0e648ed3fb39

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityGlendale Obstetrics & Gynecology PCA

Victim entityGlendale Obstetrics & Gynecology PCA

Incidentdiscovered Oct 25, 2025

Stated responseLaunched an investigation to determine the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov