Health Care and Rehabilitation Services of Southeastern Vermont, Inc.
bd_ad2c7c9aae377c3f · schema v1 · pii pii-v1
Full breach record for Health Care and Rehabilitation Services of Southeastern Vermont, Inc. →Health Care and Rehabilitation Services of Southeastern Vermont, Inc. (HCRS) submitted a supplemental notification to the New Hampshire Attorney General regarding unauthorized access to two email accounts. The incident involved phishing leading to credential compromise, with unauthorized access occurring between December 4 and December 9, 2024. HCRS discovered the breach on December 20, 2024. Personal information of 70 New Hampshire residents, including names, SSNs, and driver's license numbers, was accessed. HCRS reset passwords, engaged forensic investigators, and offered credit monitoring to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 4, 2024
Begins
Dec 20, 2024
Discovered
Aug 4, 2025
Filed
vs. sector median
+20 wks slower
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- Massachusetts State AGbd_f4f1829614e534852025-08-01 · +3dVerified
- Vermont State AGbd_70a94fe33c8d57812025-07-31 · +4dCandidate
- New Hampshire State AGbd_aa10c82806c65eeb2025-06-23 · +42dVerified
Filing propagation · 4 filings · 3 states
View merged incident ↗Pattern: first filing Jun 23 (NH), last Aug 4 (NH) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.