HackingStolen CredentialsTargetedIDENTITY_BASICOTHERLowContained
Next Step Healthcare
bd_dcada36069dde644 · schema v1 · pii pii-v1
Full breach record for Next Step Healthcare →Next Step Healthcare, LLC notified Vermont AG on May 29, 2025, of a data breach discovered June 5, 2024. Unauthorized access to the network occurred, potentially exposing names and variable data elements. The company engaged forensic investigators, secured systems, and offered 12-24 months of identity theft protection via IDX. The incident status is contained.
Vermont clock✗ VT AG >45 bday51 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 358 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_0cec3665847bf3a6New Hampshire State AGfiled 2025-05-30(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-05-29-next-step-healthcare-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 29, 2025
- Raw hash
- 06eacbccf7cc5400a704058f3ddf2cdc357fc9970d467848ad79ac33b3717a48
Reporting entity
- Name
- Next Step Healthcarenorm: next step healthcare
- Domain
- nextstephc.com
Victim entity
- Name
- Next Step Healthcarenorm: next step healthcare
- Domain
- nextstephc.com
Incident
- Discovered
- Jun 5, 2024
- Materiality determined
- —
- Notification sent
- May 29, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICOTHER
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 51 weeks(358 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.