HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Dermatology Associates
bd_b8e34d45fafe61dd · schema v1 · pii pii-v1
Full breach record for Dermatology Associates →Dermatology Associates notified the NH AG of a data event affecting ~3 NH residents. Unauthorized access occurred between June 4 and August 5, 2025; discovered August 4, 2025. Data involved: name, SSN, driver's license. Response included forensic investigation, credit monitoring via TransUnion, and regulatory notifications.
Leak gap clock⏱ Leak >90d30 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
A leak claim by anubis about this victim predates this filing by 117 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/dermatology-associates-20260304.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 4, 2026
- Raw hash
- 8316205b08dbbc79d1c4452c0937b29fe42d9942e8cb90f53751bcf780cd01ae
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Dermatology Associatesnorm: dermatology associates
- Domain
- totalskinhealth.com
Incident
- Discovered
- Aug 4, 2025
- Materiality determined
- —
- Notification sent
- Oct 3, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 30 weeks(212 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.