HackingHealthcareFinancial ServicesHealthcareStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)LowContained

Omni Healthcare Financial Holdings

bd_f377eef018c3a0be · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 19, 2024

Filed

Apr 9, 2025

To disclose

15 months

Affected

23state residents only

Linked

8 filings

Confidence

66%

Full breach record for Omni Healthcare Financial Holdings →3 incidents on file

Omni Healthcare Financial Holdings notified the NH AG of a data incident occurring Jan 18-19, 2024. Unauthorized access likely occurred. 23 NH residents affected; data included names and potentially other PII. Notification sent April 9, 2025, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 15 months / 446 days

Jan 18, 2024

Begins

Jan 19, 2024

Discovered

Apr 9, 2025

Filed

vs. sector median

+51 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Indiana State AGbd_638d520c260a9be82025-04-09Verified
Nebraska State AGbd_6c98cf018b8485282025-04-09Verified
Montana State AGbd_82ed2ea4b5237edc2025-04-09Candidate
California State AGbd_c312bc8f079f71642025-04-09Verified

Show 3 more filings ↓

Maine State AGbd_d6ae771d1829c68d2025-04-09Candidate
Vermont State AGbd_e7209f90cfcc53042025-04-09Verified
Massachusetts State AGbd_ec7e40596c39c0922025-04-09Verified

Name: Omni Healthcare Financial Holdings
norm: omni healthcare financial

Name: Omni Healthcare Financial Holdings
norm: omni healthcare financial
Industry: HealthcarellmFinancial Servicesllm

Discovered: Jan 19, 2024
Breach occurred: Jan 18, 2024 – Jan 19, 2024
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Apr 9, 2025
Affected individuals: 23state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged third-party specialists to assist with determining the nature and scope of the incident
Conducted a comprehensive review of the contents of the potentially affected data
Mailed several waves of notification letters to multiple covered-entity data owners
Notified several impacted individuals on behalf of those covered-entity data owners that opted-in to such notification
Worked with several third-party specialists to locate sufficient address information to notify affected individuals
Provided written notice of this incident to the potentially impacted New Hampshire residents
Offer of complimentary credit monitoring and identity protection services
Changes made: Offering complimentary credit monitoring and identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(446 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Indiana State AGApr 9 · first

Nebraska State AGApr 9 · first

Montana State AGApr 9 · first

California State AGApr 9 · first

Maine State AGApr 9 · first

Vermont State AGApr 9 · first

Massachusetts State AGApr 9 · first

New Hampshire State AGApr 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/omni-healthcare-financial-holdings-20250409.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 9, 2025
Raw hash: 14bd9952ba239a378b7a6a19d00b4e2aabf6f6f24f206404731ec11df835e7cf

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityOmni Healthcare Financial Holdings

Victim entityOmni Healthcare Financial Holdings

Incidentdiscovered Jan 19, 2024

Stated responseEngaged third-party specialists to assist with determining the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov