HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained

Warm Springs Medical Center

bd_df4424e77a13bffe · schema v1 · pii pii-v1

Full breach record for Warm Springs Medical Center →

Warm Springs Medical Center notified the NH Attorney General of a third-party data breach involving its vendor, Nationwide Recovery Services, Inc. Unauthorized access to NRS's network occurred between July 5-11, 2024. The incident affected one New Hampshire resident, exposing name, SSN, and DOB. Warm Springs discovered the incident on July 14, 2024, and sent notifications on June 13, 2025, offering 12 months of identity protection services.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_353a46f588ec18b3Indiana State AGfiled 2025-06-13Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/warm-springs-medical-center-20250613.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 13, 2025
Raw hash: 253b9247887f9f7f7d5031f97a5040029aca07b0bab0600e734c534f24ebac46

Reporting entity

Name: Warm Springs Medical Center
norm: warm springs medical center

Victim entity

Name: Warm Springs Medical Center
norm: warm springs medical center

Incident

Discovered: Jul 14, 2024
Materiality determined: Apr 7, 2025
Notification sent: Jun 13, 2025
Affected individuals: 1
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: Partner
Regulator citations: Notified federal law enforcement
Third party: via Nationwide Recovery Services, Inc.
Initial access: supply_chain

Compliance

Time to disclose: 48 weeks(334 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.