DisclosureLens
HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

Community Bridges

bd_c72b10e08f53d530 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 1, 2022

Filed

Apr 22, 2022

To disclose

7 weeks

Affected

9state residents only

Confidence

67%
Full breach record for Community Bridges2 incidents on file

Community Bridges, a non-profit agency serving individuals with developmental disabilities, notified the NH Attorney General of a data security incident. On March 1, 2022, the organization discovered a sophisticated cybersecurity attack where an unknown actor gained unauthorized access to its network and obtained data. By March 27, 2022, it was determined that personal information, including names, Social Security numbers, health insurance information, and medical information, was involved. Nine New Hampshire residents were affected. The organization secured its environment, engaged cybersecurity experts, notified the FBI, and offered 12 months of credit monitoring and identity protection services through IDX.

Incident timeline

discovery → filing · 7 weeks / 52 days

Mar 1, 2022

Discovered

Apr 22, 2022

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.