MalwareHealthcareHealthcareRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedPHIHealth (basic)Government IDIdentity (basic)MediumContained

OGLETHORPE ASSOCIATES, LLC

bd_ca098a1fc7ae37d0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 31, 2025

To disclose

—

Affected

89state residents only

Linked

7 filings

Confidence

66%

Full breach record for OGLETHORPE ASSOCIATES, LLC →2 incidents on file

Oglethorpe, Inc. experienced a ransomware attack on June 6, 2025, resulting in the unauthorized acquisition of patient data. The incident affected 89 New Hampshire residents. Compromised data included names, dates of birth, driver's license numbers, Social Security numbers, and medical information. Oglethorpe engaged forensic investigators, contained the incident, and notified the FBI. Affected individuals were offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 6, 2025

Begins

Oct 31, 2025

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Montana State AGbd_7f3b1425b5ce139e2025-10-31Candidate
Nebraska State AGbd_eb3942e76df642452025-10-31Verified
Maine State AGbd_f9d6bfb5448324f12025-10-31Verified
Vermont State AGbd_fbe2eaffef3005c62025-10-31Verified

Show 2 more filings ↓up to 4d gap

Massachusetts State AGbd_2bebbc50871810552025-11-03 · +3dVerified
Texas State AGbd_4de498a9d31be4382025-11-04 · +4dVerified

Name: OGLETHORPE ASSOCIATES, LLC
norm: oglethorpe associates

Name: OGLETHORPE ASSOCIATES, LLC
norm: oglethorpe associates
Industry: Healthcarellm

Discovered: —
Breach occurred: Jun 6, 2025
Materiality determined: —
Notification sent: Oct 31, 2025
Affected individuals: 89state-resident count only
Data types: PHIHealth (basic)Government IDIdentity (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified the FBI

During the incident: Took steps to secure its network and contain the incident
Engaged a specialized third-party forensic incident response firm
Wiped and rebuilt affected systems
Notified the FBI and are fully cooperating with their investigation
Offered free credit monitoring and identity theft protection through TransUnion
Changes made: Changed passwords
Strengthened password requirements
Implemented multi-factor authentication
Reviewing and altering policies, procedures, and network security software
Bolstering network security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGOct 31 · first

Nebraska State AGOct 31 · first

Maine State AGOct 31 · first

Vermont State AGOct 31 · first

New Hampshire State AGOct 31 · first · this page

Massachusetts State AG+3d

Texas State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/oglethorp-20251031.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 31, 2025
Raw hash: e94e86625feff28899e62f4d320087899be3153aef183764730823f94e93d843

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityOGLETHORPE ASSOCIATES, LLC

Victim entityOGLETHORPE ASSOCIATES, LLC

IncidentRansomware

Stated responseTook steps to secure its network and contain the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov