HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Forward, The National Databank for Rheumatic Diseases
bd_bf1fa1bdda078a66 · schema v1 · pii pii-v1
Full breach record for Forward, The National Databank for Rheumatic Diseases →Forward, The National Databank for Rheumatic Diseases notified the NH AG of unauthorized network access between March 17-22, 2025. Suspicious activity was detected in March 2025. Data exposed included names, addresses, and SSNs for 23 NH residents. Forward engaged forensic specialists, provided 24 months of credit monitoring, and implemented additional cybersecurity safeguards.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_009089fe50437da3Vermont State AGfiled 2025-07-22Verified
- bd_be901a955d21e750Indiana State AGfiled 2025-07-22Verified
- bd_dee6aa8ce0cbab6bMaine State AGfiled 2025-07-22Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/forward-national-databank-rheumatic-diseases-20250722.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 22, 2025
- Raw hash
- 29d57f432bdce9a85bb6e164940bccaffe76513bed8a435d35bfd90d0b365591
Reporting entity
- Name
- Forward, The National Databank for Rheumatic Diseasesnorm: forward the national databank for rheumatic diseases
Victim entity
- Name
- Forward, The National Databank for Rheumatic Diseasesnorm: forward the national databank for rheumatic diseases
Incident
- Discovered
- Mar 1, 2025
- Materiality determined
- —
- Notification sent
- Jul 22, 2025
- Affected individuals
- 23
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified Office of the New Hampshire Attorney General Consumer Protection & Antitrust Bureau
Compliance
- Time to disclose
- 20 weeks(143 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.