HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

IMS Company

bd_d6b1cd06985de9ab · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jun 18, 2026

Filed

Oct 16, 2026

To disclose

17 weeks

Affected

1state residents only

Confidence

70%

Full breach record for IMS Company →

IMS Care Center, LLC reported unauthorized access to its email environment occurring between June 17-18, 2026, discovered on June 18, 2026. The incident potentially exposed name, address, Social Security numbers, and medical information for one New Hampshire resident. IMS engaged forensic investigators, implemented technical safeguards including Sophos MDR, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 17 weeks / 120 days

Jun 17, 2026

Begins

Jun 18, 2026

Discovered

Oct 16, 2026

Filed

vs. sector median

+8 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: IMS Care Center, LLC
norm: ims care center
Domain: wilsonelser.com

Name: IMS Company
norm: ims
Domain: imscompany.com
Industry: Healthcarellm

Discovered: Jun 18, 2026
Breach occurred: Jun 17, 2026 – Jun 18, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Oct 16, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Engaged a specialized cybersecurity firm to conduct a forensic investigation to determine the nature and scope of the Event
Informed its law firm and began identifying the affected individuals in preparation for notice
Implemented new technical safeguards adding Sophos MDR
Restricted login locations/system access
Implemented periodic technical and nontechnical evaluations by increasing phish training
Trained or retrained workforce members
Revised policies and procedures
Offered at least 12 months of complimentary credit monitoring and identity theft restoration services through Cyberscout, a TransUnion company, to all individuals to help protect their identity
Provided guidance on how to better protect against identity theft and fraud
Changes made: Implemented new technical safeguards adding Sophos MDR
Restricted login locations/system access
Implemented periodic technical and nontechnical evaluations by increasing phish training
Trained or retrained workforce members
Revised policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(120 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ims-care-center-20261016.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 16, 2026
Raw hash: 2cbe99dbe567b72d849b15bd361e5329d699f9149b7995b36e1f44d9a7306872

Reporting entityIMS Care Center, LLC

Victim entityIMS Company

Incidentdiscovered Jun 18, 2026

Stated responseEngaged a specialized cybersecurity firm to conduct a forensic investigation to determine the nature and scope of the Event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov