Gateways Community Services
bd_c2255502d4c6cffc · schema v1 · pii pii-v2
Full breach record for Gateways Community Services →2 incidents on fileGateways Community Services, a nonprofit providing home and community-based services, experienced a cybersecurity incident involving phishing. On February 2, 2026, suspicious activity was discovered in an employee's email account. Forensic investigation revealed that email accounts were compromised via phishing between November 12, 2025, and January 21, 2026, resulting in unauthorized access to files containing personal information. Gateways notified 627 New Hampshire residents and an additional 134 Maine residents. Affected data included names, dates of birth, Medicaid IDs, financial information, and medical records. The organization secured the accounts, engaged forensic experts, and offered credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Nov 12, 2025
Begins
Feb 2, 2026
Discovered
Sep 23, 2026
Filed
vs. sector median
+24 wks slower
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.