HackingHealthcareHealthcareData ExfiltratedEmployee Data InvolvedEmploymentFinancial accountHealth (basic)Identity (basic)Government IDPHIMediumContained

Advantage Home Health Care

bd_df274d4b383b3e9b · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jun 16, 2026

Filed

Aug 1, 2026

To disclose

—

Affected

1state residents only

Linked

4 records

Confidence

64%

Full breach record for Advantage Home Health Care →

Advantage Home Health Care notified employees of a data breach where an unauthorized third party accessed a server on June 9, 2026. The company became aware of the incident on June 16, 2026. Affected data may include names, SSNs, dates of birth, addresses, phone numbers, employment information, and health insurance details. The company engaged forensic specialists, notified law enforcement, and is offering 24 months of credit and cyber monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

Jun 9, 2026

Begins

Jun 16, 2026

Discovered

Aug 1, 2026

Filed

This filing is one of 4 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitethegentlemenbd_8f53f15fd8d535652026-07-17 · +15dCandidate

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_08690e392c51d3782026-08-25 · +24dCandidate
Indiana State AGbd_c52a7ad3200c1d0e2026-08-25 · +24dCandidate

Name: Advantage Home Health Care
norm: advantage home health care
Domain: advantagehhc.com

Name: Advantage Home Health Care
norm: advantage home health care
Domain: advantagehhc.com
Industry: Healthcarellm

Discovered: Jun 16, 2026
Breach occurred: Jun 9, 2026
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 25, 2026
Affected individuals: 1state-resident count only
Data types: EmploymentFinancial accountHealth (basic)Identity (basic)Government IDPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified and worked with U.S. federal law enforcement

During the incident: Took protective actions to stop the unauthorized activity
Engaged leading security and forensics specialists
Launched an investigation
Notified and worked with U.S. federal law enforcement
Retained industry-leading cybersecurity specialists
Scanned our environment
Implemented additional security measures
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score/Cyber Monitoring services at no charge
Changes made: Implemented additional security measures
Continue to evaluate and deploy the level of security protocols, continuous monitoring, and staff training needed to prevent and defend against cybersecurity threats
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Massachusetts State AGAug 1 · first · this page

HHS OCR+24d

Indiana State AG+24d

Pattern: first filing Aug 1 (MA), last Aug 25 (IN) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1429-advantage-home-health-care/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2026
Raw hash: aa6923dd82c45fd60104b090b58d3914b4e591e616e4efa6b74f06949e42b6f8

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityAdvantage Home Health Care

Victim entityAdvantage Home Health Care

Incidentdiscovered Jun 16, 2026

Stated responseTook protective actions to stop the unauthorized activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov