Social EngineeringHealthcareRetail & ConsumerHealthcarePhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainIdentity (basic)Government IDMediumContained

Freedom Square of Seminole

bd_b595f87b84229f72 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 16, 2024

Filed

Jul 21, 2025

To disclose

44 weeks

Affected

3state residents only

Linked

6 filings

Confidence

65%

Full breach record for Freedom Square of Seminole →

Freedom Square of Seminole reported unauthorized access to employee email accounts between Sept 9-12, 2024, following suspicious activity detected on Sept 16, 2024. The incident involved phishing leading to credential compromise. Data at risk included names and SSNs for 3 New Hampshire residents. The company engaged forensic specialists, secured accounts, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 44 weeks / 308 days

Sep 9, 2024

Begins

Sep 16, 2024

Discovered

May 13, 2025

Scope determined

Jul 21, 2025

Filed

vs. sector median

+32 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_3103e22e4226a56c2025-07-12 · +9dVerified
Maine State AGbd_7514220287d6b13c2025-07-12 · +9dVerified
Vermont State AGbd_41667b15956135152025-07-11 · +10dVerified
Indiana State AGbd_86df6996c95d9cdf2025-07-11 · +10dVerified

Show 1 more filing ↓up to 10d gap

HHS OCRbd_b61a23117bc6426e2025-07-11 · +10dVerified

Name: Freedom Square of Seminole
norm: freedom square of seminole

Name: Freedom Square of Seminole
norm: freedom square of seminole
Industry: HealthcarellmRetail & Consumerllm

Discovered: Sep 16, 2024
Breach occurred: Sep 9, 2024 – Sep 12, 2024
Undetected for: 7 daysoccurrence → discovery
Materiality determined: May 13, 2025
Notification sent: Jul 11, 2025
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Engaged third-party incident response and data forensic specialists
Secured the accounts
Undertook a thorough investigation
Implemented additional technical safeguards
Offering 12 months of complimentary credit monitoring and identity protection services
Placed notice of this event on its website
Began providing notice to individuals by United States mail
Changes made: Implemented additional technical safeguards to further enhance the security of information in its possession and to prevent similar events from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 44 weeks(308 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Vermont State AGJul 11 · first

Indiana State AGJul 11 · first

HHS OCRJul 11 · first

Massachusetts State AG+1d

Maine State AG+1d

New Hampshire State AG+10d · this page

Pattern: first filing Jul 11 (VT), last Jul 21 (NH) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/freedom-square-seminole-20250721.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2025
Raw hash: e6f2eaa2e542065212f43c827da78a9e8bd6919f1401725b9ef87c6e13db1b16

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityFreedom Square of Seminole

Victim entityFreedom Square of Seminole

Incidentdiscovered Sep 16, 2024

Stated responseEngaged third-party incident response and data forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov