HackingHealthcareIdentity (basic)Government IDHealth (basic)Financial accountFinancial credentialsHighContained

Alpine Ear Nose & Throat

bd_a4f33ce1e416b9fd · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 19, 2024

Filed

Jan 30, 2026

To disclose

15 months

Affected · nationwide

65,6488 in this filing

Linked

7 filings

Confidence

67%

Full breach record for Alpine Ear Nose & Throat →

Alpine Ear, Nose, & Throat, P.C. (AENT) notified the New Hampshire Attorney General of a cybersecurity incident discovered on November 19, 2024. The breach potentially exposed personal, medical, and financial data of 65,648 individuals, including 8 New Hampshire residents. AENT engaged forensic investigators and an MSP, offered 12 months of credit monitoring, and enhanced technical security measures. Notification letters were mailed on January 30, 2026.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d15 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 15 months / 437 days

Nov 19, 2024

Discovered

Jan 30, 2026

Filed

This filing is one of 7 about the same incident.View merged incident

A leak claim by bianlian about this victim predates this filing by 437 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitebianlianbd_cbbe2673519f7a142024-12-01 · +425dVerified
Leak Sitebianlianbd_aa6f35632c5bb0f82024-11-19 · +437dVerified by operator

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_1b1e0b50cd16d0cd2026-01-30Verified
Maine State AGbd_273587203463b4c12026-01-30Verified
Massachusetts State AGbd_ca77674f1f4bab5f2026-01-30Verified
HHS OCRbd_513c3cd96acbfdd12025-01-17 · +378dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Alpine Ear Nose & Throat
norm: alpine ear nose throat
Domain: alpineent.com

Discovered: Nov 19, 2024
Materiality determined: —
Notification sent: Jan 30, 2026
Affected individuals: 65,648state + nationwide
Data types: Identity (basic)Government IDHealth (basic)Financial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau

During the incident: Engaged a specialized third-party cybersecurity firm to conduct a forensic investigation
Worked with their Managed Services Provider (MSP) to secure their systems
Posted substitute notice on its organization’s website
Offered twelve (12) months of complimentary credit monitoring and identity theft restoration services through IDX
Changes made: Enhancing technical security measures and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(437 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

HHS OCRJan 17 · first

Indiana State AG+378d

Maine State AG+378d

Massachusetts State AG+378d

New Hampshire State AG+378d · this page

Pattern: first filing Jan 17 (CO), last Jan 30 (NH) — a 378-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/alpine-ear-nose-throat-20260130.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 30, 2026
Raw hash: c61139bc95ce5acb0be9f28f55b876143499a197ac88f7ca3837438ed666fe59

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityAlpine Ear Nose & Throat

Incidentdiscovered Nov 19, 2024

Stated responseEngaged a specialized third-party cybersecurity firm to conduct a forensic investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov