MisuseHealthcareEducationHealthcareData MishandlingCustomer Data InvolvedEmployee Data InvolvedPHIIdentity (basic)Health (basic)EducationFinancial accountLowContained

Kid CenterEd, PLLC

bd_de1b35eff8a8d9c5 · schema v1 · pii pii-v2

Severity

Low

Discovered

Jul 24, 2026

Filed

Sep 1, 2026

To disclose

—

Affected

198state residents only

Linked

3 filings

Confidence

67%

Full breach record for Kid CenterEd, PLLC →

Kid CenterEd, PLLC notified affected individuals that a former employee improperly downloaded files containing protected health information, personal information, and educational records (IEPs) on or about June 18-19, 2025. The incident was discovered on July 24, 2026. The data included names, addresses, diagnoses, test scores, and some credit card authorization forms. Social Security numbers and bank account numbers were not involved. Kid CenterEd engaged legal counsel and forensic experts, suspended the former employee's access, and is pursuing legal action.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 401 days

Jun 18, 2025

Begins

Jul 24, 2026

Discovered

Sep 1, 2026

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_46ce0d805b697bea2026-09-22 · +21dVerified
Vermont State AGbd_c2d0c70628a291052026-09-22 · +21dVerified

Name: Kid CenterEd, PLLC
norm: kid centered

Name: Kid CenterEd, PLLC
norm: kid centered
Industry: HealthcarellmEducationllm

Discovered: Jul 24, 2026
Breach occurred: Jun 18, 2025 – Jun 19, 2025
Undetected for: 401 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 22, 2026
Affected individuals: 198state-resident count only
Data types: PHIIdentity (basic)Health (basic)EducationFinancial account
Attack vector: Insider
Threat actor: Internal
Regulator citations: Communicating with regulators, as necessary
Initial access: insider_action

During the incident: Engaging outside legal counsel experienced in data privacy and security matters to conduct a thorough investigation and analysis
Retaining a digital forensic expert to analyze the scope and nature of the unauthorized file access
Suspending all former employee accounts to prevent any further unauthorized access to our systems
Conducting a comprehensive review of all affected files to identify the individuals and types of information involved
Communicating with regulators, as necessary
Pursuing legal action against the former employee for breach of contractual confidentiality obligations
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGSep 1 · first · this page

New Hampshire State AG+21d

Vermont State AG+21d

Pattern: first filing Sep 1 (MA), last Sep 22 (VT) — a 21-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1598-kid-centered-pllc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2026
Raw hash: 08736dbae800a9861ba066ce3d17875d349551cf6ce429292f8049b91cb60d67

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityKid CenterEd, PLLC

Victim entityKid CenterEd, PLLC

Incidentdiscovered Jul 24, 2026

Stated responseEngaging outside legal counsel experienced in data privacy and security matters to conduct a thorough investigation and analysis

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov