MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICLowContained
Horizon Healthcare RCM
bd_ef67249e664d4227 · schema v1 · pii pii-v1
Full breach record for Horizon Healthcare RCM →Horizon Healthcare RCM, a revenue-cycle management provider, issued a supplemental data breach notice to the New Hampshire Attorney General on November 26, 2025. The incident involved a computer virus (ransomware) that encrypted files and resulted in unauthorized copying of patient data between December 26-27, 2024. Approximately 10 New Hampshire residents were affected. The breach involved names and other personal information. Horizon engaged Kroll for identity monitoring and implemented enhanced security measures.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_00ff9a47dfc272c4Vermont State AGfiled 2025-11-26Verified
- bd_24c4025ca3ca22ffMaine State AGfiled 2025-11-26Candidate
- bd_c5493de054e7d752Montana State AGfiled 2025-11-26Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/horizon-financial-management-20251126.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 26, 2025
- Raw hash
- 44f3ffeb6048af787e71ca804b3cd7c2dfb3b10cf922b5415c33386831e27282
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Horizon Healthcare RCMnorm: horizon healthcare rcm
Incident
- Discovered
- Dec 27, 2024
- Materiality determined
- —
- Notification sent
- Nov 26, 2025
- Affected individuals
- 10
- Data types
- IDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 48 weeks(334 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.