HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Rectangle Health
bd_a237bd270bf20718 · schema v1 · pii pii-v1
Full breach record for Rectangle Health →Rectangle Health notified the New Hampshire AG of a data event affecting 10 NH residents. Unauthorized access to Salesforce customer data occurred Aug 12-17, 2025. Impacted data included names, DOBs, and SSNs. Notification sent Oct 8, 2025. Credit monitoring provided.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_37b9232200ff883bIndiana State AGfiled 2025-10-08Verified
- bd_396a03c05a84425eMontana State AGfiled 2025-10-08Candidate
- bd_6ae1999fbf53d01fVermont State AGfiled 2025-10-08Verified
- bd_c7f48cbd2ba22cdeMaine State AGfiled 2025-10-08Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/rectangle-health-20251008.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 8, 2025
- Raw hash
- 594190f300c47cacefd28e0e1549c0b8b230a6f6d020cae54870aa4f2df21378
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Rectangle Healthnorm: rectangle health
Incident
- Discovered
- Aug 14, 2025
- Materiality determined
- —
- Notification sent
- Oct 8, 2025
- Affected individuals
- 10
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Third party
- via Salesforce
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.