HackingHealthcareHealthcareVulnerability ExploitData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Dental Studies Institute

bd_b7a778ec4cbc8c5f · schema v1 · pii pii-v1

Severity

Low

Discovered

May 4, 2026

Filed

May 18, 2026

To disclose

14 days

Affected

3state residents only

Linked

5 filings

Confidence

66%

Full breach record for Dental Studies Institute →

Dental Studies Institute notified the New Hampshire Attorney General of a cybersecurity incident affecting 3 NH residents. Unauthorized access to the e-commerce web application occurred between October 30, 2025, and January 26, 2026. Personal information (names and payment card data) was accessed. Discovery was confirmed on May 4, 2026. Notifications were sent starting May 12, 2026. Malicious code was removed.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 186 days

discovery → filing · 14 days

Oct 30, 2025

Begins

May 4, 2026

Discovered

May 18, 2026

Filed

vs. sector median

11 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_1893df1afd83ac072026-05-13 · +5dCandidate
Vermont State AGbd_38688ac3a6810a6a2026-05-13 · +5dVerified
Maine State AGbd_7a3e0565fd66958b2026-05-13 · +5dVerified
Massachusetts State AGbd_81bd27fc49d425922026-05-13 · +5dVerified

Name: Dental Studies Institute
norm: dental studies institute
Domain: dsi-nj.com

Name: Dental Studies Institute
norm: dental studies institute
Domain: dsi-nj.com
Industry: Healthcarellm

Discovered: May 4, 2026
Breach occurred: Oct 30, 2025 – Jan 26, 2026
Undetected for: 186 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 12, 2026
Affected individuals: 3state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Provided courtesy notification to the Office of the New Hampshire Attorney General, Consumer Protection Bureau
Initial access: exploit_public_facing

During the incident: Began efforts to remediate the issue, eliminate the threat, and commence a prompt and thorough investigation
Working closely with external cybersecurity professionals
Extensive forensic investigation and manual document review
Removed the malicious application code from its environment
Changes made: Removed the malicious application code from its environment to ensure that payments continue to be secure
Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 days(14 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGMay 13 · first

Vermont State AGMay 13 · first

Maine State AGMay 13 · first

Massachusetts State AGMay 13 · first

New Hampshire State AG+5d · this page

Pattern: first filing May 13 (IN), last May 18 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/dental-studies-institute-20260518.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 18, 2026
Raw hash: 18998327c13029974f91cd482c5c08214ee19ba94115807668c8c7df49700e55

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityDental Studies Institute

Victim entityDental Studies Institute

Incidentdiscovered May 4, 2026

Stated responseBegan efforts to remediate the issue, eliminate the threat, and commence a prompt and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov