HackingHealthcareProfessional ServicesHealthcareStolen CredentialsCapture Stored DataCustomer Data InvolvedEmployee Data InvolvedData ExfiltratedPIIIdentity (basic)Government IDEmploymentMediumContained

Therapeutic Health Services

bd_ed78a3330b539efb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 26, 2024

Filed

Oct 30, 2024

To disclose

35 weeks

Affected

12state residents only

Linked

12 records

Confidence

67%

Full breach record for Therapeutic Health Services →

Therapeutic Health Services filed a supplemental notice with the New Hampshire AG regarding a February 26, 2024 network compromise. Unauthorized access affected personal and medical information, including HR files. 12 New Hampshire residents were notified. THS engaged forensic experts, notified law enforcement, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d35 weeks discovery → filing

Incident timeline

discovery → filing · 35 weeks / 247 days

Feb 26, 2024

Discovered

Oct 30, 2024

Filed

vs. sector median

+26 wks slower

This filing is one of 12 records about the same incident.View merged incident

A leak claim by hunters_international about this victim was first seen 225 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Oregon State AGbd_1e7c1a6bf43c0ed92024-10-31 · +1dVerified by operator
New Hampshire State AGbd_5fa83b73c13ad3b92024-07-23 · +99dVerified by operator
Maine State AGbd_0b0839c7602e26eb2024-07-19 · +103dVerified by operator
Massachusetts State AGbd_76c95b587b2d6ea42024-07-19 · +103dVerified by operator

Show 6 more filings ↓up to 188d gap

Indiana State AGbd_9f2b9b64c727f93a2024-07-19 · +103dVerified by operator
California State AGbd_db7590df7889e1192024-07-19 · +103dVerified by operator
Vermont State AGbd_3160e87da8cd14602024-07-18 · +104dVerified by operator
Montana State AGbd_793062f3ad804d272024-07-18 · +104dVerified
Washington State AGbd_f491b2810a3b9c5c2024-07-11 · +111dVerified
HHS OCRbd_b12268e09d53b7412024-04-25 · +188dVerified

Showing first 10 of 11 linked disclosures.

Name: Therapeutic Health Services
norm: therapeutic health
Domain: ths-wa.org

Name: Therapeutic Health Services
norm: therapeutic health
Domain: ths-wa.org
Industry: HealthcarellmProfessional Servicesllm

Discovered: Feb 26, 2024
Materiality determined: —
Notification sent: Aug 17, 2024
Affected individuals: 12state-resident count only
Data types: PIIIdentity (basic)Government IDEmployment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Filed supplemental notice with New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Secured and remediated the compromise
Engaged additional third-party experts
Hardened and enhanced our data security
Commenced an investigation
Notified law enforcement regarding this incident
Arranged for complimentary credit monitoring and identity restoration services
Changes made: Enhancing our cyber preparedness through additional awareness training
Updating our procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(247 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

HHS OCRApr 25 · first

Washington State AG+77d

Vermont State AG+84d

Montana State AG+84d

Maine State AG+85d

Massachusetts State AG+85d

Indiana State AG+85d

California State AG+85d

New Hampshire State AG+89d

New Hampshire State AG+188d · this page

Oregon State AG+189d

Pattern: first filing Apr 25 (WA), last Oct 31 (OR) — a 189-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/therapeutic-health-services-20241030.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 30, 2024
Raw hash: df2e8f5e67dec5dfd5de7b1fada9f5c4b01c1357eb1c5da8938de3f500be3414

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityTherapeutic Health Services

Victim entityTherapeutic Health Services

Incidentdiscovered Feb 26, 2024

Stated responseSecured and remediated the compromise

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov