HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)PHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Personic Health
bd_e2cd6a2f641e5799 · schema v1 · pii pii-v1
Full breach record for Personic Health →Personic Management Company LLC notified the New Hampshire Attorney General of a security incident involving a third-party software platform. An unauthorized actor accessed the platform on August 29, 2025, acquiring PHI of one New Hampshire resident. Personic discovered the activity on September 1, 2025, and began notifying residents on November 18, 2025, offering 24 months of credit monitoring. Remediation included enhanced MFA, VPN, and SOC services.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_7876c8966459705fIndiana State AGfiled 2025-11-18Verified
- bd_f43e54c2ae91f79eTexas State AGfiled 2025-11-19(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/personic-management-20251118.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 18, 2025
- Raw hash
- 49b7f1d7a3b6e48a52a028dc2057769405e2c1f517e79e55b94d9568949bc0fa
Reporting entity
- Name
- DLA PIPER LLP (US)norm: dla piper llp us
Victim entity
- Name
- Personic Healthnorm: personic health
- Domain
- personichealth.com
Incident
- Discovered
- Sep 1, 2025
- Materiality determined
- —
- Notification sent
- Nov 18, 2025
- Affected individuals
- 1
- Data types
- PHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Provided notice to the Office of the New Hampshire Attorney General Consumer Protection & Antitrust Bureau
- Initial access
- supply_chain
Compliance
- Time to disclose
- 11 weeks(78 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.