HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Evoke Wellness at Cohasset (?MCAT?)
bd_c882133aca817963 · schema v1 · pii pii-v1
Full breach record for Evoke Wellness at Cohasset (?MCAT?) →Evoke Wellness at Cohasset, a medical health provider, notified the New Hampshire Attorney General of a data incident discovered on August 7, 2025. Unauthorized access potentially compromised patient information including names, addresses, SSNs, driver's licenses, and credit card data. Seven New Hampshire residents were identified and notified via mail on February 20, 2026. The organization offered 12 months of credit monitoring through Cyberscout/TransUnion and implemented additional security measures.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_0806d4398fdc2ba7Indiana State AGfiled 2026-02-20Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/evoke-wellness-cohasset-20260220.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 20, 2026
- Raw hash
- 7a3c0f0cba8ded89dba54b62ba1ac8b9750102d100e2de17e28886ecfc02bbe2
Reporting entity
- Name
- Wilson, Elser, Moskowitz, Edelman & Dicker LLPnorm: wilson elser moskowitz edelman dicker
Victim entity
- Name
- Evoke Wellness at Cohasset (?MCAT?)norm: evoke wellness at cohasset mcat
Incident
- Discovered
- Aug 7, 2025
- Materiality determined
- —
- Notification sent
- Feb 20, 2026
- Affected individuals
- 7
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 weeks(197 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.