MalwareRansomwareStolen CredentialsData ExfiltratedRansom DemandedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
OGLETHORPE ASSOCIATES, LLC
bd_ca098a1fc7ae37d0 · schema v1 · pii pii-v1
Full breach record for OGLETHORPE ASSOCIATES, LLC →Oglethorpe, Inc. reported a ransomware attack on June 6, 2025, affecting 89 New Hampshire residents. The incident compromised patient data including names, DOBs, driver's license numbers, SSNs, and medical information. Oglethorpe engaged forensic investigators, rebuilt systems, and notified the FBI. Remediation included MFA implementation and credit monitoring offers.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_7f3b1425b5ce139eMontana State AGfiled 2025-10-31Candidate
- bd_f9d6bfb5448324f1Maine State AGfiled 2025-10-31Verified
- bd_fbe2eaffef3005c6Vermont State AGfiled 2025-10-31Verified
- bd_4de498a9d31be438Texas State AGfiled 2025-11-04(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/oglethorp-20251031.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 31, 2025
- Raw hash
- e94e86625feff28899e62f4d320087899be3153aef183764730823f94e93d843
Reporting entity
- Name
- OGLETHORPE ASSOCIATES, LLCnorm: oglethorpe associates
Victim entity
- Name
- OGLETHORPE ASSOCIATES, LLCnorm: oglethorpe associates
Incident
- Discovered
- Jun 6, 2025
- Materiality determined
- —
- Notification sent
- Oct 31, 2025
- Affected individuals
- 89
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the FBI and is fully cooperating with their investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 21 weeks(147 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.