HackingStolen CredentialsCapture Stored DataCustomer Data InvolvedEmployee Data InvolvedData ExfiltratedPIIIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Therapeutic Health Services
bd_ed78a3330b539efb · schema v1 · pii pii-v1
Full breach record for Therapeutic Health Services →Therapeutic Health Services filed a supplemental notice with the New Hampshire AG regarding a February 26, 2024 network compromise. Unauthorized access affected personal and medical information, including HR files. 12 New Hampshire residents were notified. THS engaged forensic experts, notified law enforcement, and offered credit monitoring.
Leak gap clock✗ Leak >180d35 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed12 affectedView incident
A leak claim by hunters_international about this victim predates this filing by 224 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/therapeutic-health-services-20241030.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 30, 2024
- Raw hash
- df2e8f5e67dec5dfd5de7b1fada9f5c4b01c1357eb1c5da8938de3f500be3414
Reporting entity
- Name
- Therapeutic Health Servicesnorm: therapeutic health
- Domain
- ths-wa.org
Victim entity
- Name
- Therapeutic Health Servicesnorm: therapeutic health
- Domain
- ths-wa.org
Incident
- Discovered
- Feb 26, 2024
- Materiality determined
- —
- Notification sent
- Aug 17, 2024
- Affected individuals
- 12
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed supplemental notice with New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 35 weeks(247 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.