HackingCustomer Data InvolvedData ExfiltratedPHIHEALTH_BASICIDENTITY_BASICLowActive
Avosina Healthcare Solutions
bd_ba06270bf07e87ac · schema v1 · pii pii-v1
Full breach record for Avosina Healthcare Solutions →New Hampshire Attorney General's office received a breach notification from Avosina Healthcare Solutions regarding unauthorized access to an archived file system on July 29, 2025. The incident affected 13 New Hampshire residents, exposing names, addresses, and medical/insurance information. The company secured systems, engaged investigators, notified law enforcement, and offered 12 months of credit monitoring and ID theft recovery services through IDX.
Leak gap clock⏱ Leak >90d24 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed13 affectedView incident
A leak claim by qilin about this victim predates this filing by 168 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/avosina-healthcare-solutions-20260113.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 13, 2026
- Raw hash
- 3e18db22a058e7a60bc4065defd1adc36fbbe0ebb24b916b64f40a8330c49c9d
Reporting entity
- Name
- Marshall Denneheynorm: marshall dennehey
Victim entity
- Name
- Avosina Healthcare Solutionsnorm: avosina healthcare
- Domain
- avosinamed.com
Incident
- Discovered
- Jul 29, 2025
- Materiality determined
- —
- Notification sent
- Jan 13, 2026
- Affected individuals
- 13
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- External
- Regulator citations
- submitted notice of data breach to New Hampshire DOJ
Compliance
- Time to disclose
- 24 weeks(168 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.