HackingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDownstream VictimsIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Nationwide Recovery Services, Inc.
bd_f716fd72481985a8 · schema v1 · pii pii-v1
Full breach record for Nationwide Recovery Services, Inc. →Select Medical Holdings, Inc. notified the NH AG of a data breach at former vendor Nationwide Recovery Services (NRS). Unauthorized access occurred July 5-11, 2024, resulting in exfiltration of patient/guarantor PII (names, DOB, SSN, health info). NRS discovered the incident on July 11, 2024. Select notified 214 NH residents on June 6, 2025, offering credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_16344af9ac358a81California State AGfiled 2025-06-06Candidate
- bd_4063c2b887187bd4Vermont State AGfiled 2025-06-06Verified
- bd_c4fee33645d310a0Vermont State AGfiled 2025-05-23(14d gap)Verified
- bd_fc5e851b479bd88eVermont State AGfiled 2025-05-21(16d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/select-medical-holdings-20250606.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 6, 2025
- Raw hash
- 3b7e9586f226b5b09ee79ed258671adee9ee728f4bacbc5810a2f9985f495beb
Reporting entity
- Name
- Select Sportnorm: select sport
- Domain
- us.select-sport.com
Victim entity
- Name
- Nationwide Recovery Services, Inc.norm: nationwide recovery
Incident
- Discovered
- Jul 11, 2024
- Materiality determined
- Feb 3, 2025
- Notification sent
- Jun 6, 2025
- Affected individuals
- 214
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported incident to law enforcementNotified New Hampshire Attorney General
- Third party
- via Nationwide Recovery Services, Inc.vendor
Compliance
- Time to disclose
- 47 weeks(330 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.